{"schema":"threatline.record/2","record":{"id":"CVE-2026-50217","aliases":[],"summary":"A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial of service (system crash / BSOD) via an ","details":"A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial of service (system crash / BSOD) via an outbound ICMPv6 packet containing an IPv6 Hop-by-Hop extension header. When the IPv6 ICMP redirect policy is active, the packet is copied into a buffer that is freed but subsequently passed to a downstream filter. The size of the freed allocation is attacker-controlled (via packet length), enabling kernel pool grooming. Exploitation requires that the non-default IPv6 ICMP capture/redirect policy is enabled for the endpoint.","categories":["Unclassified"],"product":"Guardicore Platform Agent","vendor":"Akamai","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50217","source_modified_at":"2026-10-14T17:22:56.490Z","fetched_at":"2026-10-23T18:48:36.087640Z","product":"Guardicore Platform Agent","vendor":"Akamai","versions":[{"lessThan":"7.4","status":"affected","version":"0","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-50217","source_modified_at":"2026-10-14T17:22:56.490Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"name":"Guardicore Platform Agent","ecosystem":null},"version":"7.4","basis":"first unaffected version stated in the CVE record"}],"cvss":4.7,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00108,"percentile":0.01133,"score_date":"2026-10-23"},"published_at":"2026-10-14T00:00:00.000Z","modified_at":"2026-10-14T17:22:56.490Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-50217","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-10-14T17:22:56.490Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-50217","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://techdocs.akamai.com/guardicore-platform-agent/changelog/"},{"source":"CVE List","url":"https://www.akamai.com/newsroom/security-advisories/guardicore-platform-agent-7-4"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"partial","assessed_at":"2026-10-14T17:11:25.611792Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-14T17:22:56.490Z","content_hash":"26401bb4108d87054ece80729e7a5fc15db65da660fa43287de3711f01c7c30c"}}