CVE-2026-33824Vulnerability
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability
Reported by 5 independent sources · first reported by Infosecurity Magazine · last reported
Last reported 10 days ago
Fix due 21 Aug 2026
Used by ransomware: not knownCISA KEV catalogue
higher than 75% of CVEsFIRST EPSS, as of 23 Oct 2026
What the reports say
6 reports, newest first · the exact sentence from each-
Top RCE Vulnerabilities“CVE-2026-33824”
-
Cyber Brief 26-09 - August 2026“Windows IKE RCE vulnerability CVE-2026-33824 exploited in the wild”
-
Microsoft security advisory – August 2026 monthly rollup (AV26-804) – Update 4“On August 18, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-33824 and CVE-2026-55040 to their Known Exploited Vulnerabilities (KEV) Database.”
-
August 2026 CVE Landscape“CVE-2026-33824”
-
July 2026 CVE Landscape“CVE-2026-33824”
-
Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits“CVE-2026-33824 (CVSS rating: 9.8): Windows IKE Extensions (IKE VPN) vulnerability with manual active exploitation (reverse shell attempts)”
Indicators reported together
named in the same reportsAlso named with it: CVE-2025-49113, CVE-2026-60004, CVE-2026-34486, CVE-2026-39987, CVE-2026-3055, CVE-2026-68820, CVE-2026-65400, CVE-2026-64849, CVE-2026-0300, CVE-2026-33017, CVE-2026-63030, CVE-2021-3156, CVE-2021-29441, CVE-2026-12569, CVE-2026-3395, CVE-2026-55040, CVE-2025-68613, CVE-2026-21858, CVE-2026-58231, CVE-2024-42009
Thanks — we review every report.