CVE-2026-7424 - Vulnerability Analysis

Overview

FreeRTOS-Plus-TCP < V4.4.1 and < V4.2.6 contain an integer underflow caused by improper DHCPv6 sub-option parsing, letting adjacent network actors corrupt IPv6 configuration and cause denial of service, exploit requires DHCPv6 enabled.

Severity & Score

Impact

Adjacent attackers can corrupt IPv6 settings and cause permanent denial of service requiring hardware reset.

Mitigation

Upgrade to version V4.2.6, V4.4.1 or newer.

References

• https://aws.amazon.com/security/security-bulletins/2026-022-aws/
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.2.6
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.1

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner