FreeRTOS-Plus-TCP: Two Critical Vulnerabilities Require Immediate Patching
FreeRTOS-Plus-TCP versions 4.0.0–4.2.5 and 4.3.0–4.4.0 have two nasty security flaws. CVE-2026-7422 lets adjacent network devices bypass MAC address validation and checksum checks, while CVE-2026-7423 causes integer underflow in ICMP handlers, potentially crashing your device. If you're running affected versions with outgoing ping enabled, you need to update ASAP.
source: [aws/security-bulletin]