EC
Product
eclipse-threadx/netxduo
3
CVEs
0
On KEV
8.7
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add eclipse-threadx/netxduo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102716 | 8.7 | Sep 29 | An unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser cannot convert Affected: through 6.5.1 |
| CVE-2026-102715 | 7.1 | Sep 29 | mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet Affected: through 6.5.1 |
| CVE-2026-102720 | 5.3 | Sep 29 | A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message Affected: through 6.5.1 |
Showing 3