Use-After-Free Vulnerability in Akamai Guardicore Platform Agent
CVE-2026-50215

4.4MEDIUM

Key Information:

Vendor

Akamai

Vendor
CVE Published:
14 October 2026

What is CVE-2026-50215?

A vulnerability exists within the packet-capture driver of Akamai's Guardicore Platform Agent, where improper memory management leads to a use-after-free scenario. When specific IPv6 proxy or redirect rules are set, an attacker with Administrator privileges can craft a malicious outbound IPv6 packet, triggering the vulnerability at DISPATCH_LEVEL. This can result in an immediate system crash, impacting the stability and security of the affected systems. Users of Akamai Guardicore should ensure they are updated to version 7.4 or later to mitigate this risk.

Affected Version(s)

Guardicore Platform Agent 0 < 7.4

References

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.