PT-2025-20938

CVE-2025-26677

Published

2025-05-13

Updated

2026-03-16

Description by

CVSS 2.0

7.8

High

MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: Remote Desktop Gateway Service (affected versions not specified)

Description: The issue is related to uncontrolled resource consumption in the Remote Desktop Gateway Service, allowing an unauthorized attacker to deny service over a network. This can halt enterprise remote access.

Recommendations: Apply Microsoft's update KB5050009. As a temporary workaround, consider restricting access to the Remote Desktop Gateway Service to minimize the risk of exploitation.

Exploitability

Fix

Impacts

Researchers

K0Shl

Ʌ!Ɔ⊥Ojv

Vendors

Affected products

Weakness enumeration

CWE-400: Uncontrolled Resource Consumption

CWE-770: Allocation of Resources Without Limits or Throttling

Related identifiers