CVE-2026-72930

A use-after-free vulnerability in the Windows Secure Socket Tunneling Protocol (SSTP) allows authorized attackers to execute arbitrary code on affected systems. This high-severity flaw poses a significant risk to organizations utilizing SSTP for secure communications, particularly those in sectors where remote access is critical. IT security teams should prioritize patching this vulnerability to mitigate potential exploitation.