CVE-2026-102552 Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP DNS resolver
Remote attackers can poison the DNS cache of FreeRTOS devices by forging replies, requiring an upgrade and enabling a specific configuration flag.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-102552?
CVE-2026-102552 is a high-severity vulnerability in FreeRTOS-Plus-TCP, published on 16 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before V4.4.2 might allow remote third-party to insert a chosen address into the device's DNS cache via a forged DNS reply.
To remediate this issue, users should upgrade to version V4.4.2 and enable ipconfigDNS_CHECK_REPLY_SOURCE_IP.
Weakness: CWE-940
Which versions are affected by CVE-2026-102552?
How do I fix CVE-2026-102552?
No fix has been published for CVE-2026-102552 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-102552 being exploited?
There is no known exploitation of CVE-2026-102552 in the wild and no public exploit code.
Sources
Also known as GHSA-h4fw-pv82-p7h5.