AWS has issued an important security bulletin regarding FreeRTOS-Plus-TCP, an open-source TCP/IP stack for embedded devices. Two critical vulnerabilities, CVE-2026-102551 and CVE-2026-102552, have been identified. CVE-2026-102551 affects the IPv6 Router Advertisement handler, allowing remote attackers to influence an endpoint's IPv6 configuration. This could lead to the interception of the device's IPv6 traffic. This vulnerability exists when IPv6 and Router Advertisements are enabled. CVE-2026-102552 impacts the DNS resolver, permitting remote attackers to inject malicious entries into the device's DNS cache. This could result in redirected connections to affected domain names. Both vulnerabilities affect versions of FreeRTOS-Plus-TCP up to and including V4.4.1. Users are strongly advised to update to a patched version. Further details and the most current information can be found in the linked article.