CVE Catalog

CVE-2026-96866

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Summary

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

Risk Assessment

An attacker could cause the NDES service to crash, potentially disrupting PKI infrastructure and preventing certificate issuance.

Recommendation

Apply security updates and restrict access to NDES to trusted clients only.

Other vulnerabilities in Network Device Enrollment Service

See all
Original NVD description (English source)

Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS