CVE-2026-50496

HighCVSS 7.5

Published: 14/07/2026(UTC)Updated: 21/07/2026(UTC)Translated: 22/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.13%

63th percentile - higher than 63% of all known CVEs

Summary

An out-of-bounds read vulnerability in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.

Risk Assessment

The organization risks exposure of sensitive data, such as network configurations or credentials, which could enable further attacks on the infrastructure.

Recommendation

Apply the security update provided by Microsoft for Windows immediately. Additionally, restrict SNMP service access to trusted hosts only.

Other vulnerabilities in Windows Network Policy Server

CVE-2022-41056High
Denial of Service vulnerability in the RADIUS protocol in Windows Network Policy Server (NPS). An attacker could exploit this vulnerability to cause the service to crash.

Original NVD description (English source)

Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.