Dirty Frag packet injection vulnerabilities (CVE-2026-43284, CVE-2026-43500)

Vulnerability ID	Vulnerability Overview
CVE-2026-43284	IP fragmentation logic miscalculates offsets, allowing a remote attacker to overwrite adjacent packet data and inject malicious payloads into active connections.
CVE-2026-43500	A race condition in the fragmentation reassembly queue permits an attacker to bypass packet validation routing checks.

Affected Supported TeraStations

None
 

Back to Security Notices

Date	Description
09/02/2026	Initial release

Back to Security Notices