CVE-2026-63913 NatJack Attack

General Privacy & Security
1

CVE: https://www.cve.org/CVERecord?id=CVE-2026-63913

(Partially?) Addressing a class of bugs involving the handling of NAT where a Linux box does NAT and there are two devices behind the NAT, one the attacker and one the victim.

Attack scenarios might include:

  • Linux device running containers / virtual machines (with untrusted code)
  • Linux device as hotspot
  • router using embedded Linux
2 Likes