CVE-2026-96246
HighCVSS 7.5Summary
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
Risk Assessment
An attacker could access sensitive data transmitted through NPS, potentially compromising confidentiality.
Recommendation
Install security updates for NPS. Monitor network traffic and restrict access to the service.
Other vulnerabilities in Network Policy Server (NPS)
See all- CVE-2026-85799High
A use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-85371High
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-70207High
Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.
- CVE-2022-41097Medium
An information disclosure vulnerability in the RADIUS protocol in Network Policy Server (NPS) allows an attacker to gain access to sensitive data. The flaw could be exploited to intercept authentication information or other data transmitted over the network.
Original NVD description (English source)
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS