CVE-2026-85799
HighCVSS 8.1Summary
A use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Risk Assessment
A network-based attacker can execute arbitrary code on the NPS server, potentially leading to full compromise of authentication infrastructure.
Recommendation
Immediately install security updates for Network Policy Server and consider restricting network access to this service.
Other vulnerabilities in Network Policy Server (NPS)
See all- CVE-2026-96246High
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
- CVE-2026-85371High
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-70207High
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
- CVE-2022-41097Medium
An information disclosure vulnerability in the RADIUS protocol in Network Policy Server (NPS) allows an attacker to gain access to sensitive data. The flaw could be exploited to intercept authentication information or other data transmitted over the network.
Original NVD description (English source)
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS