CVE-2026-124740

A use-after-free vulnerability exists in BusyBox's udhcpc6 DHCPv6 client. A malicious server on the local network can trigger this condition by sending a crafted DHCPv6 reply packet that lacks usable address options. This flaw causes the client to read stale heap memory, potentially leading to a ...

Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for November 2026, which includes 1095 vulnerabilities affecting a range of products, including 64 that Microsoft marked as "critical." Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild...

CVE-2026-88212

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-113862

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over a network...

EUVD-2026-122077

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-88212

A Use after free vulnerability exists in Windows Network Address Translation (NAT) , which could allow an unauthorized attacker to execute code over an adjacent network . The vulnerability impacts the system's NAT component. While the provided documents do not specify the exact root cause or a de...

EUVD-2026-121967

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over a network...

CVE-2026-113862

A Use after free vulnerability exists in Windows Network Address Translation (NAT) , which could allow an unauthorized attacker to execute code over a network. Technical details regarding the specific root cause are not provided in the documents. Remediation is available via official Microsoft se...

Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over a network...

PT-2026-143626

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over a network...

PT-2026-144147

Use after free in Windows Network Address Translation NAT allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-71569

A flaw was found in Apache Camel's A2A component. Due to inconsistent network address validation, a remote attacker can supply a webhook URL that bypasses internal address restrictions. This issue leads to Server-Side Request Forgery SSRF, where the application can be induced to send unauthorized...

Linux Distros Unpatched Vulnerability : CVE-2026-81499

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Ubuntu Linux - GHSA-6v6x-387m-rj4w: Project restriction bypass on network address sets CVE-2026-81499 Note that Nessus relies on the presence of the package as...

CVE-2026-81499

GHSA-6v6x-387m-rj4w: Project restriction bypass on network address sets...

UBUNTU-CVE-2026-81499

GHSA-6v6x-387m-rj4w: Project restriction bypass on network address sets...

PT-2026-89235

GHSA-6v6x-387m-rj4w: Project restriction bypass on network address sets...

CVE-2026-81499

GHSA-6v6x-387m-rj4w: Project restriction bypass on network address sets...

CVE-2026-56179 Windows Network Address Translation (NAT) Spoofing Vulnerability

...

CVE-2026-56179: Origin Validation Error

Origin validation error in Windows Network Address Translation NAT allows an unauthorized attacker to perform spoofing over an adjacent network...

CVE-2026-72761

The CVE affects the webhook URL validator in website/notifications/webhooks.py, which uses ip.is_global after DNS resolution. IPv6 transition addresses (NAT64 64:ff9b::/96, 6to4 2002::/16, Teredo 2001:0000::/32) are categorized as globally routable by IANA, causing is_global to return True even w...