PT-2026-35980 · Aws · Freertos-Plus-Tcp

Aniruddha Kanhere + 1 · CVE-2026-7426 · Published 2026-04-29 · Updated 2026-04-29

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions FreeRTOS-Plus-TCP versions prior to V4.2.6 FreeRTOS-Plus-TCP versions prior to V4.4.1

Description Insufficient validation of the prefix length field during IPv6 Router Advertisement processing allows an adjacent network actor to cause memory corruption. By sending a crafted Router Advertisement with a prefix length value exceeding the maximum valid length, a heap buffer overflow occurs. This issue does not impact users who only process IPv4 Router Advertisements.

Recommendations Upgrade to version V4.2.6 or later. Upgrade to version V4.4.1 or later.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-7426

GHSA-97QG-4359-XM3X

Affected Products

Freertos-Plus-Tcp

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7426.json · Exploit
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-97qg-4359-xm3x · Patch
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.4.1 · Patch
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.2.6 · Patch
• https://aws.amazon.com/security/security-bulletins/2026-023-aws · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-7426 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-7426 · Security Note
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP · Note
• https://twitter.com/CVEnew/status/2049578368543449131 · Twitter Post