CVE-2026-85811 in Windows

Summary

by MITRE • 10/14/2026

Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: Microsoft
• Reservation: 09/04/2026
• Disclosure: 10/14/2026
• Moderation: accepted
• Entry: VDB-419220
• CPE: 20261014
• CWE: CWE-416 (confirmed)
• CVSS: 7.5 (CNA)
• EPSS: 0.00359
• KEV: no
• Activities: very low
• Sector: Police, Telecommunication, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-85811
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-85811
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-85811/