Network Policy Server (NPS) Remote Code Execution Vulnerability
This is a record in the CVE List, the public register of security flaws. The title and any summary are in the source's own words.
Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.
- Kind
- Check with your IT provider
- Started
- Why we can name the supplier
- An official register says it: a CVE record, CISA's list of exploited flaws or the NCSC
Products it names
- Windows Server 2012 / 2012 R2 (Microsoft)
- Windows Server (Microsoft)
The latest
We aim to update this thread. For the latest, check the supplier's own page directly: www.cve.org/CVERecord?id=CVE-2026-85806.
This entry comes from our research build of public sources made on 24 Oct 2026.