{"id":"CVE-2026-84015","published":"2026-10-13T19:20:51.720","lastModified":"2026-10-16T16:21:50.567","description":"Heap-based buffer overflow in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an unauthorized attacker to execute code over a network.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-84015","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in PPP EAP-TLS allows remote attackers to execute arbitrary code with high privileges. This vulnerability is particularly dangerous because it can be exploited over the network without authentication, making it a critical threat to network infrastructure.","exploitability":"Exploitation is relatively straightforward as it requires only network access to trigger the buffer overflow, with no authentication needed for the initial exploit attempt.","blast_radius":"If exploited, this vulnerability could compromise entire network access points and potentially allow attackers to gain full control over remote access infrastructure, affecting multiple connected systems.","remediation":"No fixed version is published. Disable EAP-TLS functionality or restrict network access to PPP endpoints until a patch is available.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","network","ppp","eap"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:50:05.187Z"}}