CVE-2026-70207
HighCVSS 7.5Summary
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
Risk Assessment
An attacker could exploit the vulnerability to execute code on the NPS server, potentially leading to compromise of network services.
Recommendation
Update NPS to the latest version and restrict network access to the NPS server.
Other vulnerabilities in Network Policy Server (NPS)
See all- CVE-2026-96246High
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85799High
A use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-85371High
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2022-41097Medium
An information disclosure vulnerability in the RADIUS protocol in Network Policy Server (NPS) allows an attacker to gain access to sensitive data. The flaw could be exploited to intercept authentication information or other data transmitted over the network.
Original NVD description (English source)
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS