Description
A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can send a single crafted outbound IPv6 packet via a raw IPV6_HDRINCL socket to trigger this at DISPATCH_LEVEL, resulting in an immediate system crash.
Published: 2026-10-14
Score: 4.4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service (System Crash)
Action: Patch ASAP
AI Analysis

Impact

A use‑after‑free bug exists in the Windows WFP packet‑capture driver shipped with Akamai Guardicore Platform Agent. When an IPv6 proxy/redirect rule is active, a local attacker who has Administrator privileges can send a single crafted outbound IPv6 packet via a raw IPV6_HDRINCL socket at DISPATCH_LEVEL, causing the driver to crash and resulting in an immediate system crash. The flaw does not allow arbitrary code execution or privilege escalation beyond the crash that results in a denial of service.

Affected Systems

Akamai Guardicore Platform Agent for Windows, all releases prior to 7.4.

Risk and Exploitability

The CVSS score is 4.4, and the EPSS score is less than 1%, indicating low exploitation probability. The vulnerability is not listed in CISA’s KEV catalog. Exploitation requires local Administrator privileges and a single crafted packet, making it a local denial‑of‑service vector that can crash the system if the vulnerable driver is loaded and an IPv6 proxy/redirect rule is in place.

Generated by OpenCVE AI on October 16, 2026 at 01:54 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Akamai Guardicore Platform Agent to version 7.4 or later.
  • Remove or disable IPv6 proxy/redirect rules until the driver is patched.
  • Limit raw socket usage by configuring Windows firewall or local policies to restrict IPV6_HDRINCL socket creation to trusted services.

Generated by OpenCVE AI on October 16, 2026 at 01:54 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Akamai
Akamai guardicore Platform Agent
Vendors & Products Akamai
Akamai guardicore Platform Agent

Sat, 17 Oct 2026 01:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 16 Oct 2026 02:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free Enables Local System Crash via Crafted IPv6 Packet in Guardicore Platform Agent

Thu, 15 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Windows WFP Packet-Capture Driver Causes Local System Crash

Wed, 14 Oct 2026 17:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free in Windows WFP Packet-Capture Driver Causes Local System Crash

Wed, 14 Oct 2026 05:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416
Metrics cvssV3_1

{'score': 4.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H'}

Wed, 14 Oct 2026 05:15:00 +0000

Type Values Removed Values Added
Description A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect rule is active, a local attacker with Administrator privileges can send a single crafted outbound IPv6 packet via a raw IPV6_HDRINCL socket to trigger this at DISPATCH_LEVEL, resulting in an immediate system crash.
References

Subscriptions

Akamai Guardicore Platform Agent
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-10-17T00:54:14.593Z

Reserved: 2026-06-04T00:00:00.000Z

Link: CVE-2026-50215

cve-icon Vulnrichment

Updated: 2026-10-17T00:54:10.632Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-14T05:16:44.260

Modified: 2026-10-17T02:17:19.260

Link: CVE-2026-50215

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T20:45:05Z

Weaknesses