CVE-2026-56181
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
Origin validation error in Windows Network Address Translation (NAT) allows an unauthenticated attacker to perform spoofing over an adjacent network.
Risk Assessment
An attacker can impersonate another device on the network, potentially leading to traffic interception or man-in-the-middle attacks.
Recommendation
Install the latest Windows security updates from Microsoft.
Other vulnerabilities in Windows NAT
See all- CVE-2026-56179High
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
- CVE-2024-38119High
A remote code execution vulnerability in Windows Network Address Translation (NAT) allows an attacker to execute code remotely.
- CVE-2024-21344Medium
A Denial of Service vulnerability in Windows Network Address Translation (NAT) allows an attacker to cause service failure or unavailability. The attack can be performed remotely without authentication.
- CVE-2024-21343Medium
Denial of service vulnerability in Windows Network Address Translation (NAT). An attacker could cause the NAT service to crash, potentially disrupting network connectivity.
- CVE-2021-26879High
Denial of service vulnerability in Windows Network Address Translation (NAT). An attacker could exploit this to cause a service failure.
Original NVD description (English source)
Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.