CVE Catalog
CVE-2026-96861
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk1.13%
66th percentile - higher than 66% of all known CVEs
Summary
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
Risk Assessment
Similar to CVE-2026-96866, an attacker could cause the NDES service to crash, potentially disrupting PKI infrastructure.
Recommendation
Apply security updates and restrict access to NDES to trusted clients only.
Other vulnerabilities in Network Device Enrollment Service
See allOriginal NVD description (English source)
Out-of-bounds read in Network Device Enrollment Service (NDES) allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS