CVE-2026-33826

A stack-based buffer overflow in the Windows IKE Extensions service (IKEEXT) allows an unauthenticated remote attacker to achieve code execution by sending a malformed IKE_SA_INIT packet. The vulnerability is in the IKEv2 negotiation parser and requires no user interaction or authentication. The network-adjacent attack vector and lack of required privileges make this a critical-severity issue with potential for wormable exploitation across enterprise VPN and IPsec infrastructure.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-121

Threats tracking this CVE

• Microsoft April 2026 Patch Tuesday — 167 Flaws, 2 Zero-Days (SharePoint Spoofing CVE-2026-32201 + Defender EoP CVE-2026-33825) — CRITICAL

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33826

Markdown version · Threadlinqs Intelligence