Microsoft issued an emergency out-of-band hotpatch (KB5084597) on March 14, 2026, to fix a remote code execution vulnerability in the Windows Routing and Remote Access Service (RRAS), affecting Windows 11 Enterprise 24H2 and 25H2 endpoints enrolled in the hotpatch update channel. The out-of-band release cadence signals Microsoft judged the risk urgent enough to bypass the standard Patch Tuesday schedule. Unpatched enterprise endpoints with RRAS exposed to the network are at risk of full remote compromise without user interaction. **ADVISORY STATUS: CVE identifier is pending MSRC publication. CVSS vector and EPSS score are unconfirmed. This item is sourced from secondary reporting only (T3 tier). Priority and detection guidance should be reassessed once MSRC publishes the canonical advisory with CVE ID assignment.**