ND
Product
NetX Duo
21
CVEs
0
On KEV
9.3
Max CVSS
21
New 30D
Severity mix
Critical 2High 11Medium 8Low 0
Watch
Add NetX Duo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102722 | 6.9 | Sep 29 | In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply Affected: through 6.5.1.202602 |
| CVE-2026-102721 | 6.9 | Sep 29 | A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram Affected: through 6.5.1 |
| CVE-2026-102759 | 6.3 | Sep 29 | NetX Secure TLS accepts an empty application-data record without verifying its message authentication code Affected: 6.2.0 through 6.5.1.202602 |
| CVE-2026-102727 | 6.0 | Sep 29 | FTP Passive Data Connection Not Bound to the Authenticated Control Peer Affected: through 6.5.1.202602 |
| CVE-2026-102726 | 6.0 | Sep 29 | Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read Affected: through 6.5.1.202602 |
| CVE-2026-102725 | 6.0 | Sep 29 | Out-of-bounds Read from Unvalidated MSRP Attribute List Length Affected: through 6.5.1.202602 |
| CVE-2026-102724 | 6.0 | Sep 29 | NULL Pointer Dereference When Evicting the Sole MSRP Attribute Affected: through 6.5.1.202602 |
| CVE-2026-102723 | 6.0 | Sep 29 | NULL Pointer Dereference on MSRP Attribute Table Exhaustion Affected: through 6.5.1.202602 |
Showing 8