Vulnerability · Published May 13, 2026 · Assigned by Google
CVE-2026-8369Improper Input Validation in OpenThread NAT64 Translator
Medium 6.0
In plain English
A medium-severity improper input validation in OpenThread from The OpenThread Authors. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Severity (CVSS 4.0)6.0Medium
Exploit odds (30 days)0.2%top 94.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper Input Validation in the NAT64 translator in The OpenThread Authors OpenThread before commit 26a882d on all platforms allows an attacker on the adjacent IPv4 network to inject corrupted IPv6 packets into the Thread mesh or bypass security checks via crafted IPv4 packets with options.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The OpenThread Authors | OpenThread | commit 26a882d |
Weakness: CWE-20 · Vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N