Sergey Bliznyuk

**Name of the Vulnerable Software and Affected Versions** Windows Telephony Service (affected versions not specified) **Description** An elevation-of-privilege issue exists in the Windows Telephony Service due to improper external control of file names or paths. Successful exploitation may allow an authorized attacker to elevate privileges over an adjacent network and affect the system. The vulnerability was discovered by Sergey Bliznyuk and addressed by Microsoft in January 2026. The issue is also described as an authenticated Remote Code Execution (RCE). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Remote Access Connection Manager (affected versions not specified) **Description** The issue is related to improper privilege management, allowing an authorized attacker to elevate privileges locally. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bitrix Site Manager versions prior to 21.0.100 Bitrix Site Manager versions 22.0.0 through 22.0.400 Bitrix Site Manager module Landing versions prior to 23.800.0 **Description** The 'vote' (also known as "Polls, Votes") module in Bitrix Site Manager contains a flaw that allows a remote, unauthenticated attacker to execute arbitrary code. This is due to the ability to send specially crafted network packets, enabling the attacker to write arbitrary files to the vulnerable system. Approximately 160,000 sites are estimated to be susceptible to this issue. A separate issue exists in the Landing module, allowing for arbitrary code execution. The exploitation flow for the Landing module is complex. The module has its own versioning separate from the core module. The vulnerable module allows attackers to redirect users from a legitimate site to malicious resources. The API endpoint `/bitrix/admin/*` is highlighted as a potential area of concern, and restricting access to it is recommended. **Recommendations** Update Bitrix Site Manager to a version prior to 21.0.100. Update Bitrix Site Manager to version 22.0.400 or later. Update the Landing module to version 23.850.0 or later. Restrict access to the `/bitrix/admin/*` API endpoint.