CVE-2026-49868 | RIOT-OS RIOT 2026.04 DHCPv6 Client client.c _parse_reply memory corruption

October 16, 2026 Yanac

A vulnerability identified as very critical has been detected in RIOT-OS RIOT 2026.04. This impacts the function _parse_reply of the file sys/net/application_layer/dhcpv6/client.c of the component DHCPv6 Client. Performing a manipulation results in memory corruption.

This vulnerability was named CVE-2026-49868. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More