New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-56181 | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network | 8.3 | <1% | ||
| CVE-2026-63913 | Linux kernel: netfilter: conntrack: tcp: do not force CLOSE on invalid-seq RST without direction check | 8.2 | <1% |
From the original article
2 min read at thehackernews.com
Swati Khandelwal Aug 07, 2026 Network Security / Vulnerability Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.