CVE-2026-56179
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
Risk Assessment
An attacker could impersonate other devices on the network, potentially leading to traffic interception or man-in-the-middle attacks.
Recommendation
Apply the latest security updates for Windows NAT.
Other vulnerabilities in Windows NAT
See all- CVE-2026-56181High
Origin validation error in Windows Network Address Translation (NAT) allows an unauthenticated attacker to perform spoofing over an adjacent network.
- CVE-2024-38119High
A remote code execution vulnerability in Windows Network Address Translation (NAT) allows an attacker to execute code remotely.
- CVE-2024-21344Medium
A Denial of Service vulnerability in Windows Network Address Translation (NAT) allows an attacker to cause service failure or unavailability. The attack can be performed remotely without authentication.
- CVE-2024-21343Medium
Denial of service vulnerability in Windows Network Address Translation (NAT). An attacker could cause the NAT service to crash, potentially disrupting network connectivity.
- CVE-2021-26879High
Denial of service vulnerability in Windows Network Address Translation (NAT). An attacker could exploit this to cause a service failure.
Original NVD description (English source)
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS