Akamai vulnerabilities

CVEs per yearBy the year they were published

1. 20258
2. 20267

Newest CVEs

• CVE-2026-50218

  Akamai GPA (Guardicore Platform Agent) client on all platforms before 7.4 improperly validates JWT tokens used for seeding. By convincing a user to interact…

  Akamai · Guardicore Platform Agent

  High8.5
• CVE-2026-50217

  A use-after-free vulnerability in the Windows WFP callout driver of Akamai Guardicore Platform Agent (GPA) allows a local low-privileged user to cause a denial…

  Akamai · Guardicore Platform Agent

  Medium4.7
• CVE-2026-50216

  An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for…

  Akamai · Guardicore Platform Agent

  Medium5.3
• CVE-2026-50215

  A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA) before 7.4. When an IPv6 proxy/redirect…

  Akamai · Guardicore Platform Agent

  Medium4.4
• CVE-2026-46449

  The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The…

  Akamai · Guardicore Platform Agent

  Medium6.7
• CVE-2026-34354

  Akamai Guardicore Platform Agent (GPA) and Zero Trust Client on Linux and macOS allow TOCTOU-based local privilege escalation. The GPA service creates an IPC…

  Akamai · Guardicore Platform Agent

  High7.4
• CVE-2026-26365

  Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request containing the…

  Akamai · Ghost

  Medium4.0
• CVE-2025-53841

  The GC-AGENTS-SERVICE running as part of Akamai´s Guardicore Platform Agent for Windows versions prior to v49.20.1, v50.15.0, v51.12.0, v52.2.0 is affected by…

  Akamai · Guardicore Platform Agent

  High7.8
• CVE-2025-54142

  Akamai Ghost before 2025-07-21 allows HTTP Request Smuggling via an OPTIONS request that has an entity body, because there can be a subsequent request within…

  Akamai · AkamaiGhost

  Medium4.0
• CVE-2025-32094

  An issue was discovered in Akamai Ghost, as used for the Akamai CDN platform before 2025-03-26. Under certain circumstances, a client making an HTTP/1.x…

  Akamai · AkamaiGhost

  Medium4.0