ET
Product
Eclipse ThreadX - NetX Duo
7
CVEs
0
On KEV
9.3
Max CVSS
6
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Eclipse ThreadX - NetX Duo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-93475 | 9.3 | Oct 20 | Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509 Affected: through 6.5.1.202602 |
| CVE-2026-103416 | 9.3 | Oct 7 | Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the cache writes past it… Affected: through 6.5.1.202602 |
| CVE-2026-94018 | 8.8 | Oct 20 | NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path Affected: 6.4.2 through 6.5.1.202602 |
| CVE-2026-92843 | 8.7 | Oct 20 | Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX Secure Affected: through 6.5.1.202602 |
| CVE-2026-92853 | 8.7 | Oct 20 | Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Secure Affected: through 6.5.1.202602 |
| CVE-2026-11576 | 7.5 | Jun 19 | The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup label, but this unified cleanup path… Affected: 6.4.2 through 6.5.0.202601 |
| CVE-2026-93003 | 6.9 | Oct 20 | NetX Duo Web HTTP server interprets request body content as HTTP header fields Affected: through 6.5.1.202602 |
Showing 7