CVE-2026-102551
HIGH
NVD
CVSS Score
7.7
Severity
HIGH
Published
Oct 16, 2026
Vendor
unknown
Description
Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement. To remediate this issue, users should upgrade to version V4.4.2.