A new version of the NAT Slipstreaming attack reportedly gives remote attackers access to any TCP or UDP service behind a firewall.
A writeup on researcher Samy Kamkar's site (Kamkar created the original browser-based NAT bypass technique in 2020) claims the v2.0 variant extends the attack to reach any TCP or UDP port, removing the scope limits of the first version. The post appeared on July 15, 2026 with minimal early engagement. No CVE identifier appears in the public writeup, no browser vendors or router manufacturers are named as affected parties, and no coordinated disclosure timeline is mentioned.
That matters because the original NAT Slipstreaming forced a rapid response: browser makers patched the technique within months of its disclosure. If v2.0 genuinely sidesteps those fixes and works against any port, the exposure would be significant. But "remotely access any TCP/UDP service" is a broad claim, and the writeup has not been independently confirmed.
Minimal engagement on a link aggregator is not a security advisory. Worth monitoring, not acting on.