CVE-2026-50215

medium

Description

A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can send a single crafted outbound IPv6 packet via a raw IPV6_HDRINCL socket to trigger this at DISPATCH_LEVEL, resulting in an immediate system crash.

References

https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4

https://techdocs.akamai.com/guardicore-platform-agent/changelog/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-100805

Details

Source: Mitre, NVD

Published: 2026-10-14

Updated: 2026-10-17

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:L/AC:L/Au:M/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 4.4

Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Severity: Medium

EPSS

EPSS: 0.00136