Product by Eclipse Foundation
Eclipse Threadx Netx Duo
28 known vulnerabilities in Eclipse Threadx Netx Duo (Eclipse Foundation), 0 of them actively exploited (CISA KEV).
Key figures
28
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-94018 | Eclipse ThreadX - NetX Duo: Use of Uninitialized Variable | — | |
| High | CVE-2026-114408 | NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full | — | |
| Critical | CVE-2026-93475 | Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509 | — | |
| High | CVE-2026-92843 | Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX Secure | — | |
| High | CVE-2026-92853 | Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Secure | — | |
| Critical | CVE-2026-103416 | Eclipse ThreadX - NetX Duo: Out-of-bounds Write | — | |
| High | CVE-2026-102718 | Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER length | — | |
| High | CVE-2026-106464 | Out-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsing | — | |
| High | CVE-2026-102716 | A malformed Session header permanently orphans one packet-pool block per RTSP request | — | |
| Medium | CVE-2026-106465 | Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server | — | |
| High | CVE-2026-102713 | Eclipse ThreadX NetX Duo: Out-of-bounds Read | — | |
| High | CVE-2026-102730 | Out-of-bounds Write via NAND Metadata Parsing at Mount in LevelX | — | |
| Medium | CVE-2026-93003 | NetX Duo Web HTTP server interprets request body content as HTTP header fields | — | |
| High | CVE-2026-11576 | Eclipse ThreadX - NetX Duo: Double Free | 7.5 | |
| High | CVE-2026-102715 | Eclipse ThreadX NetX Duo: Out-of-bounds Write | — | |
| High | CVE-2026-102728 | Eclipse ThreadX NetX Duo: Buffer Over-read | 7.5 | |
| High | CVE-2025-55102 | Eclipse ThreadX - NetX Duo: Allocation of Resources Without Limits or Throttling | 7.5 | |
| Medium | CVE-2026-102721 | TFTP client and server copy the ERROR packet message without bounding the read against the packet | — | |
| Medium | CVE-2026-102722 | The FTP client trusts arbitrary IP addresses in the PASV server response | — | |
| High | CVE-2026-102726 | Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read | — | |
| High | CVE-2026-102725 | Out-of-bounds Read from Unvalidated MSRP Attribute List Length | — | |
| High | CVE-2026-102724 | NULL pointer dereference when evicting the last MSRP attribute in a participant's list | — | |
| High | CVE-2026-102714 | Eclipse ThreadX NetX Duo: Out-of-bounds Read | — | |
| High | CVE-2026-102723 | NULL Pointer Dereference on MSRP Attribute Table Exhaustion | — | |
| Medium | CVE-2026-102712 | Out-of-bounds read in the NetX Secure DTLS ClientHello parser | — |