CVE Catalog
CVE-2026-96861
HighCVSS 7.5Summary
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
Risk Assessment
Similar to CVE-2026-96866, an attacker could cause the NDES service to crash, potentially disrupting PKI infrastructure.
Recommendation
Apply security updates and restrict access to NDES to trusted clients only.
Other vulnerabilities in Network Device Enrollment Service
See allOriginal NVD description (English source)
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS