---
id: "CVE-2026-105561"
page: "https://infrastack.ai/live/CVE-2026-105561"
kind: "vulnerability"
aliases: ["CVE-2026-105561"]
title: "Windows SSTP: uncontrolled resource use lets an attacker deny service"
severity: "high"
cvss: 7.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "sstp", "vpn", "windows"]
not_affected_if: []
published_at: "2026-11-10T19:17:58+00:00"
first_seen_at: "2026-11-10T19:24:20+00:00"
updated_at: "2026-11-10T19:47:28+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-105561", "first_seen_at": "2026-11-10T19:24:20+00:00"}]
exploit_sources: []
---

# Windows SSTP: uncontrolled resource use lets an attacker deny service

Link for people: https://infrastack.ai/live/CVE-2026-105561 (this .md is for agents)

Windows' Secure Socket Tunneling Protocol (SSTP) VPN service can be made to consume resources without limit. An unauthenticated attacker on the network can exhaust the machine and take the service down.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-11-10T19:24:20+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-105561

## From the sources

Uncontrolled resource consumption in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to deny service over a network.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_