CVE-2026-85811
HighCVSS 7.5Summary
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
Risk Assessment
An attacker with network access could execute code, potentially leading to compromise of the NPS server and network security breach.
Recommendation
Apply security updates for NPS and monitor network traffic to the NPS server.
Other vulnerabilities in Network Policy Server
See all- CVE-2026-83655High
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
- CVE-2026-85806Critical
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-100222Critical
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS