bartek@aws: ~/news
$ whoami
$ AWS Architect · DevOps · Cloud
Friday, October 16, 2026

FreeRTOS-Plus-TCP: Two Critical Validation Flaws in IPv6 and DNS Handling

FreeRTOS-Plus-TCP versions up to V4.4.1 have two nasty security issues. CVE-2026-102551 lets attackers hijack your IPv6 gateway config via unvalidated Router Advertisements, while CVE-2026-102552 enables DNS cache poisoning through fake resolver responses. Both vulnerabilities are active in default configs—if you're running FreeRTOS-Plus-TCP on IoT devices, update immediately to patch these remote attack vectors.

source: [aws/security-bulletin]