Skip to content
Espilon
Projects
Platforms
Platforms
See all
→
Open source and resources
Live
Espilon Learn
Courses, challenges and labs on real devices: hardware, IoT, OT and ESP32.
Hardware
IoT
OT
Start learning
→
New
Pre-registration open
Espilon Hunt
Closed-door hardware bug hunt on real products. Pilot in May 2027.
Hardware
Bug hunt
Patch
Discover Hunt
→
Ended
Espilon CTF
28 hardware, IoT and OT challenges, with write-ups published.
Hardware
IoT
OT
See the CTF
→
Framework
Open-source ESP32 platform: firmware, C2 and modules
Documentation
Build guides, wiring and the full module API
Blog
Vulnerability write-ups, CTF solutions and research notes
Framework
Advisories
Partnerships
Supporters
About
Discord
GitHub
FR
Platforms
Espilon Learn
Espilon Hunt
New
Espilon CTF
Explore
Projects
Framework
Open-source ESP32 platform: firmware, C2 and modules
Advisories
Published CVEs, one advisory each
Documentation
Build guides, wiring and the full module API
Blog
Vulnerability write-ups, CTF solutions and research notes
Association
About
Partnerships
Supporters
Discord
GitHub
Advisories
/ CVE-2026-7426
CVE-2026-7426
CVSS 8.1, high
Out-of-bounds write via unsanitized prefix length in Router Advertisement processing
Vendor
AWS · FreeRTOS
Product
FreeRTOS-Plus-TCP
Published
29 April 2026
Report
PDF, 5 pages, 1433 KB
Download the PDF
Vendor advisory
CVE record
Espilon-CVE-2026-7426.pdf
Page
1
/
5
−
+
Fit
Download
The viewer needs JavaScript.
Download the PDF