What is CVE-2026-102551?

CVE-2026-102551 is a high-severity vulnerability in Freertos Freertos-Plus-Tcp, classified under Improper Verification of Source of a Communication Channel. CVSS score: 7.7/10. Published 2026-10-16.

How severe is CVE-2026-102551?

High severity. CVSS v3 base score is 7.7 out of 10.

Vulnerability in Freertos Freertos-Plus-Tcp

CVE-2026-102551

Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow a remote third-party to influence an endpoint's IPv6 default gateway, on-link prefix, and address configuration via a crafted Router Advertisement. To remediate this issue, users should upgrade to version V4.4.2.

Published 2026-10-16 · last modified 2026-10-16.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

Freertos Freertos-Plus-Tcp

Weakness classification (CWE)

CWE-940 — Improper Verification of Source of a Communication Channel

References

ff89ba41-3aa1-4d27-914a-91399e9639e5 (release-notes, patch)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (vendor-advisory)
ff89ba41-3aa1-4d27-914a-91399e9639e5 (third-party-advisory)

Frequently asked questions

What is CVE-2026-102551?: CVE-2026-102551 is a high-severity vulnerability in Freertos Freertos-Plus-Tcp, classified under Improper Verification of Source of a Communication Channel. CVSS score: 7.7/10. Published 2026-10-16.
How severe is CVE-2026-102551?: High severity. CVSS v3 base score is 7.7 out of 10.