{"uuid": "c6226e8d-61d0-4b65-ac52-58a1b0adaae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33824", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117117778963707246", "content": "Looks like CVE-2026-33824 was added to KEV. Keep in mind that this service isn't just for IPSec VPNs. It's also used with some Windows Firewall policies so check your internal systems for listeners, not just public-facing systems.\n\nAn unauthenticated attacker could send specially crafted packets to a Windows machine with Internet Key Exchange (IKE) version 2 enabled, which could enable remote code execution.\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33824\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-33824", "creation_timestamp": "2026-08-18T17:51:26.432170Z"}