Dashboard / CVE-2026-7426

CVE-2026-7426

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 57/100
Published: 2026-04-29 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: X
AT: Present
VC: None
VI: High
VA: High

Description

Insufficient validation of the prefix length field in IPv6 Router Advertisement processing in FreeRTOS-Plus-TCP before V4.2.6 and V4.4.1 allows an adjacent network actor to cause memory corruption by sending a crafted Router Advertisement with a prefix length value exceeding the maximum valid length, resulting in a heap buffer overflow. Users processing IPv4 RA only are not impacted. To mitigate this issue, users should upgrade to the fixed version when available.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
amazon freertos-plus-tcp 4.0.0 – 4.2.6

References & Advisories (4)

Bug Bounty Relevance

57 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

6.1 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.25%
Raw Score 0.002460
Percentile 15.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00246
2026-10-28
0.00246

Intelligence Sources

nvd ref →

External Links