CVE-2026-100222

Summary

A heap-based buffer overflow in Network Policy Server allows remote attackers to execute arbitrary code with high privileges. This vulnerability can be exploited without authentication and affects the core network access control functionality.

Exploitability

Exploitation is likely straightforward with a remote attacker able to send crafted packets to the NPS service, requiring no authentication or user interaction.

Blast radius

If exploited, this vulnerability could allow attackers to gain full control over network access policies and potentially compromise entire network infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

No fixed version information is provided in the description, so implement network segmentation and restrict external access to NPS endpoints until a patch is available.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.