FreeRTOS-Plus-TCP: Two Critical Validation Flaws in IPv6 and DNS Handling
FreeRTOS-Plus-TCP versions up to V4.4.1 have two nasty security issues. CVE-2026-102551 lets attackers hijack your IPv6 gateway config via unvalidated Router Advertisements, while CVE-2026-102552 enables DNS cache poisoning through fake resolver responses. Both vulnerabilities are active in default configs—if you're running FreeRTOS-Plus-TCP on IoT devices, update immediately to patch these remote attack vectors.
source: [aws/security-bulletin]