34 matches found
Network Device Enrollment Service Code Execution
The vulnerability of the Network Device Enrollment Service NDES for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2026-96866
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
CVE-2026-96861
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
CVE-2026-85323
Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...
CVE-2026-69802
Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...
EUVD-2026-100160
Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...
CVE-2026-69802
The Network Device Enrollment Service (NDES) is impacted by a weak authentication vulnerability (CWE-1390). This flaw allows an unauthorized attacker to achieve remote code execution over the network. The vulnerability carries a HIGH base severity score of 8.1. While the documents confirm the imp...
CVE-2026-96861
An out-of-bounds read vulnerability exists in the Network Device Enrollment Service (NDES) . This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. No specific software versions, root causes, or remediation details are provided in the documents. Expl...
CVE-2026-96866
An out-of-bounds read vulnerability exists in the Network Device Enrollment Service (NDES) . This flaw allows an unauthorized attacker to perform a Denial of Service (DoS) attack over a network. The vulnerability is characterized by a CVSS 3.1 score of 7.5 (High) with a network attack vector and ...
CVE-2026-85323
Weak authentication in the Network Device Enrollment Service (NDES) allows an authorized attacker to perform spoofing over a network. The vulnerability is associated with CWE-1390 (Weak Authentication). No specific software versions, root causes, or exploit links are provided in the documents, bu...
Network Device Enrollment Service (NDES) Denial of Service Vulnerability
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
Network Device Enrollment Service (NDES) Denial of Service Vulnerability
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
Network Device Enrollment Service (NDES) Spoofing Vulnerability
Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...
Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability
Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...
Microsoft Windows: CVE-2026-96861: Network Device Enrollment Service (NDES) Denial of Service Vulnerability
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-96866: Network Device Enrollment Service (NDES) Denial of Service Vulnerability
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
Microsoft Windows: CVE-2026-85323: Network Device Enrollment Service (NDES) Spoofing Vulnerability
Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...
PT-2026-112716
Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service NDES affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network. Recommendations At the momen...
Microsoft Windows: CVE-2026-69802: Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability
Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...