CVE-2026-56181

www.globenewswire.com • August 7, 2026

Share: View original

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

NatJack Attack Class Exposes Vulnerabilities in NAT Implementations At Black Hat USA 2026, researcher Malcolm Stagg disclosed NatJack, a new attack class exploiting design flaws in Network Address Translation (NAT) systems. All 32 tested NAT products across Windows, Linux, and macOS were found vulnerable to techniques including TCP connection hijacking and DNS response poisoning. Two CVEs have been assigned: CVE-2026-56181 for Windows NAT in Hyper-V and CVE-2026-63913 for the Linux netfilter conntrack subsystem. The vulnerabilities stem from a long-held assumption that devices sharing a NAT table can trust one another, which is no longer valid in adversarial conditions. Current patches raise exploitation difficulty but do not address the fundamental design flaw. Organizations are advised to encrypt traffic and segment untrusted workloads while awaiting further vendor updates. 15 sources 69

Extracted Entities

Attack Types (1)

Man-in-the-Middle

CVEs (1)

Platforms (1)