CVE-2026-85811
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
Risk Assessment
An attacker with network access could execute code, potentially leading to compromise of the NPS server and network security breach.
Recommendation
Apply security updates for NPS and monitor network traffic to the NPS server.
Other vulnerabilities in Network Policy Server
See all- CVE-2026-85806Critical
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-100222Critical
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- CVE-2026-83655High
Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.
Original NVD description (English source)
Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS