The Patching Friars' AlmanacA calendar of CVE saints

August 6

NatJackHoly card for natjack, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 NatJack NATARE NECESSE EST
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint NatJack, Hijacker of NAT Tables

Patron of home routers, shared cloud networks, and everyone who thought NAT was a firewall.

Life

On 6 August 2026 Malcolm Stagg presented at Black Hat a family of attacks on address translation tables, the ones routers, hotspots, virtual machines and cloud gateways use to share a single IP. Anyone behind the same NAT could hijack other users' TCP connections, spoof their DNS replies or fill the table until nobody could connect. Every implementation tested turned out to be vulnerable to at least one of the techniques.

Prayer

O Saint NatJack, who swims among the neighbour's ephemeral ports, keep our traffic encrypted even when the router claims to protect us. Amen.

How to celebrate

Celebrated by updating Windows, Hyper-V and the Linux kernel, using TLS and encrypted DNS everywhere, and giving guests a subnet of their own.

Same NAT, same fate.

Technical record

Disclosed on
August 6 2026
CVE
CVE-2026-56181CVE-2026-56179CVE-2026-63913
CVSS
8.3
Product
Microsoft · Windows 11 Version 24H2

Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

Sources: natjack.io · blackhat.com

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.