CVE-2026-7426 - Vulnerability Analysis

Overview

FreeRTOS-Plus-TCP < V4.2.6 and < V4.4.1 contains a heap buffer overflow caused by insufficient validation of the prefix length field in IPv6 Router Advertisement processing, letting adjacent network attackers cause memory corruption, exploit requires adjacency to the network.

Severity & Score

Impact

Adjacent attackers can cause memory corruption via heap buffer overflow, potentially leading to denial of service or code execution.

Mitigation

Upgrade to version V4.2.6 or V4.4.1 or later.

References

• https://aws.amazon.com/security/security-bulletins/2026-023-aws/
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.2.6
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.1

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner