Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

ROS-20261013-73-0315

The vulnerability of the ucanprobe function in the drivers/net/can/usb/ucan.c module of the Linux network device driver framework is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause service failures...

Microsoft Windows: CVE-2026-96861: Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

PT-2026-112716

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service NDES affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network. Recommendations At the momen...

ROS-20261013-73-0097

The vulnerability of the ipcimeminit function in the drivers/net/wwan/iosm/iosmipcimem.c file of the Linux kernel’s network device driver module is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service...

Microsoft Windows: CVE-2026-85323: Network Device Enrollment Service (NDES) Spoofing Vulnerability

Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...

PT-2026-112084

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect t...

CVE-2026-69802: Weak Authentication

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96866: Network Device Enrollment Service (NDES) Denial of Service Vulnerability

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

PT-2026-113113

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

CVE-2026-85323: Weak Authentication

Weak authentication in Network Device Enrollment Service NDES allows an authorized attacker to perform spoofing over a network...

CVE-2026-96861: Out-of-bounds Read

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

PT-2026-113108

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service NDES affected versions not specified Description An out-of-bounds read occurs in the Network Device Enrollment Service NDES, which allows an unauthorized attacker to cause a denial of service over a network...

Microsoft Windows: CVE-2026-69802: Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability

Weak authentication in Network Device Enrollment Service NDES allows an unauthorized attacker to execute code over a network...

CVE-2026-96866: Out-of-bounds Read

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

ROS-20261012-73-0045

The vulnerability of the bondrcvvalidate function in the drivers/net/bonding/bondmain.c file of the Linux kernel’s network device driver module is related to the use of pointers. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Cisco Meraki Access Control

The vulnerability of Cisco Meraki network device software relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

CVE-2026-98239

A flaw was found in the Linux kernel's LAN743x network device driver. This vulnerability allows an attacker capable of transmitting network traffic to an affected system to cause a Denial of Service DoS or memory corruption. The issue occurs because the driver attempts to update checksum...

AZL-107898 CVE-2026-97032 affecting package sriov-network-device-plugin 3.7.0-8

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...

AZL-107889 CVE-2026-78669 affecting package sriov-network-device-plugin 3.7.0-8

A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...