Vulnerabilities

TI-2026-73755 CVE-2026-50218 · GHSA-jpj7-7jv5-rp9j

Guardicore Platform Agent JWT flaw enables resource injection

LOW 39

Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00328 Published 2026-10-14 Fixed in 7.4 CWE-99

TI-2026-73754 CVE-2026-50217 · GHSA-p8p9-vpf5-3ff3

Akamai Guardicore GPA Use-After-Free Denial of Service

LOW 20

A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial of service (system crash / BSOD) via an outbound ICMPv6 pack…

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00108 Published 2026-10-14 Fixed in 7.4 CWE-416

TI-2026-73753 CVE-2026-50216 · GHSA-426c-439h-xj38

Integer underflow in Akamai Guardicore Platform Agent DNS proxy

LOW 30

An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that be…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00325 Published 2026-10-14 Fixed in 7.4 CWE-191

TI-2026-73752 CVE-2026-50215 · GHSA-q8wq-wq6x-g2wv

Akamai Guardicore Platform Agent WFP driver use-after-free

LOW 19

A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00136 Published 2026-10-14 Fixed in 7.4 CWE-416

TI-2026-73751 CVE-2026-46449 · GHSA-fg3c-hmr6-8f64

Command injection in Akamai Guardicore Platform Agent for macOS

LOW 35

The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.01675 Published 2026-10-14 Fixed in 7.4 CWE-78