CVE-2026-50216
Last modified
CVE-2026-50216 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific value is received, a subsequent size computation underflows to a near-SIZE_MAX value, causing an allocation failure and uncaught Objective-C exception that aborts the root system extension.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Akamai | Guardicore Platform Agent | < 7.4 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-50216?
How severe is CVE-2026-50216?
How do I fix CVE-2026-50216?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-50210The device encrypts data using AES-CBC with static zero-fill…7.5
- CVE-2026-50211Leftover engineering diagnostics and factory-level diagnosti…9.8
- CVE-2026-50212Weak validation logic within device dissociation API routine…6.5
- CVE-2026-50213The account validation endpoint /v1/User/validate returns co…7.5
- CVE-2026-50214The /v1/Plan service relies entirely on a shared global API …9.8
- CVE-2026-50215A use-after-free exists in the Windows WFP packet-capture dr…4.4
- CVE-2026-50217A use-after-free vulnerability in the Windows WFP callout dr…4.7
- CVE-2026-50218Akamai GPA (Guardicore Platform Agent) client on all platfor…8.5
- CVE-2026-50219libexpat before 2.8.2 lacks handler call depth tracking for …5.9
- CVE-2026-5022The '/api/v1/files/images/{flow_id}/{file_name}' endpoint do…5.3
- CVE-2026-50221In OpenStack Swift before 2.37.2, proxy-server does not stri…5.4
- CVE-2026-50222Missing Authorization, Exposure of Sensitive Information to …7.5
Are you affected by CVE-2026-50216?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST