CVE-2026-8369CWE-20

Improper Input Validation in OpenThread NAT64 Translator

Medium · published May 13, 2026

CVSS v4.0
6.0
EPSS
0%
Percentile
16.3
In the wild
Unconfirmed
What it is

Improper Input Validation in the NAT64 translator in The OpenThread Authors OpenThread before commit 26a882d on all platforms allows an attacker on the adjacent IPv4 network to inject corrupted IPv6 packets into the Thread mesh or bypass security checks via crafted IPv4 packets with options.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00256 · 16.3th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-05-13T13:36Z
EPSS history
Timeline
  • 13 MAY 13:36Z
    Improper Input Validation in OpenThread NAT64 Translator
    cvelistv5