CVE-2026-50696

CVSS 3.1: 7.5 high
EPSS: 1%p66
Published: Jul 14, 2026 · Jul 14, 2026
Modified: Sep 17, 2026

Analyze CVE-2026-50696 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

Vendors: microsoft

Products: windows 10 1809, windows 10 21h2, windows 10 22h2, windows 11 24h2, windows 11 25h2, windows 11 26h1, windows server 2019, windows server 2022, windows server 2025

Weakness: CWE-122

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

1 story

ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability

ZDI disclosed CVE-2026-50696, a CVSS 8.1 integer underflow in Windows IKEv2 AES-GCM decryption enabling unauthenticated remote code execution on specific IPsec configurations.

ZDI Published AdvisoriesSep 8, 05:00 UTC · Sep 8, 2026AdvisoryCVE-2026-506962 · 1 read