CVE Catalog
CVE-2026-96866
HighCVSS 7.5Summary
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
Risk Assessment
An attacker could cause the NDES service to crash, potentially disrupting PKI infrastructure and preventing certificate issuance.
Recommendation
Apply security updates and restrict access to NDES to trusted clients only.
Other vulnerabilities in Network Device Enrollment Service
See allOriginal NVD description (English source)
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

