New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

Summary

Security researcher Malcolm Stagg has disclosed a new attack class named NatJack, which exploits vulnerabilities in Network Address Translation (NAT) implementations to hijack TCP sessions and spoof DNS responses. The research, presented at Black Hat USA 2026, identified specific flaws in Windows and Linux, leading to CVE-2026-56181 and CVE-2026-63913 respectively. While no universal patch exists, mitigation involves applying system updates, encrypting internal traffic, and using IP Source Guard.

Full text

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables Swati KhandelwalAug 07, 2026Network Security / Vulnerability Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Presented at Black Hat USA 2026, the research found affected behavior across independently developed implementations, including Windows and Linux. Two implementation-specific flaws have been assigned CVEs: CVE-2026-56181 (CVSS score: 8.3) in Windows NAT used by Hyper-V, and CVE-2026-63913 (CVSS score: 8.2) in Linux Netfilter conntrack. NatJack generally requires the attacker to have privileged access to a system behind the same NAT as the victim. The mitigation guidance therefore emphasizes separating untrusted workloads from trusted systems that share NAT infrastructure. There is no single patch for the broader attack class. Organizations should apply available Windows and Linux updates and encrypt traffic even within internal networks. The research also recommends Internet Protocol (IP) Source Guard where applicable. The NatJack research, conducted independently by Stagg through SODIUM-24, targets an assumption built into many NAT implementations: hosts behind the same NAT are generally assumed not to manipulate one another's connection state. An attacker controlling a system behind the same NAT can, depending on the implementation, manipulate connection-tracking entries belonging to another system. The research describes four main paths. One can redirect traffic from an active TCP connection by replacing its NAT mapping. Another interferes with a victim's DNS request so the legitimate DNS response reaches the attacker, allowing a forged response to be sent back. Other techniques disclose externally mapped ports or fill the NAT connection table with spoofed flows until legitimate clients cannot create new connections. Synack said Stagg tested the techniques against dozens of real-world network infrastructure products from multiple vendors and demonstrated proof-of-concept exploitation in a controlled environment. The NatJack site does not publish a complete product-by-product matrix. The Hacker News found no public evidence that NatJack techniques have been exploited in the wild as of August 7, 2026. For Linux, the kernel.org CNA record says a crafted SYN followed by a reset packet with an invalid sequence number can prematurely force an active Netfilter NAT entry into a closed state because the conntrack logic failed to validate its direction. Fixed stable releases include 5.10.259, 5.15.210, 6.1.176, 6.6.143, 6.12.93, 6.18.35, 7.0.12, and 7.1. Stagg says the kernel change fixes the code flaw but only mitigates the broader downstream-spoofing technique, increasing attack complexity rather than fully addressing it. Microsoft's CNA record describes the Windows issue as an origin-validation error that enables spoofing from an adjacent network. Affected releases include Windows 11 24H2 before 26100.8875, 25H2 before 26200.8875, 26H1 before 28000.2525, and Windows Server 2025 before 26100.33158. NatJack also builds on earlier research into NAT-state manipulation. An NDSS 2024 study demonstrated TCP hijacking through NAT mapping manipulation and found 52 of 67 tested routers susceptible to its attack, work that produced ten CVEs. Found this article interesting? Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post. SHARE     Tweet Share Share Share SHARE  Cloud security, Container Security, denial of service, DNS Security, linux, Microsoft, network security, Virtualization Security, Vulnerability ⚡ Top Stories This Week New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable ⭐ Featured Resources [Webinar] How Militaries Can Trust the Data Behind Autonomous Missions Download the 5-Step Action Plan for AI-Speed Exploitation Get the Checklist for Gaining Control of AI Use Across Your Organization Get the 2026 CISO Benchmark Report Based on 600 Security Leaders

Indicators of Compromise

• cve — CVE-2026-56181
• cve — CVE-2026-63913

Entities