bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Thursday, August 20, 2026

FreeRTOS-Plus-TCP DHCPv6 Parser Vulnerability Requires Immediate Patching

FreeRTOS-Plus-TCP versions 4.0.0–4.2.5 and 4.3.0–4.4.0 are vulnerable to CVE-2026-7424, an integer underflow in the DHCPv6 sub-option parser. An adjacent network attacker can corrupt IPv6 configuration, DNS settings, and DHCP leases, potentially freezing the IP task and requiring a hardware reset. Action required: upgrade to a patched version immediately if you're running affected releases.

source: [aws/security-bulletin]