| CVE-2026-93003 |
The Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of…
|
6.9
Medium
|
Oct 20, 2026 |
| CVE-2026-92843 |
A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server…
|
8.7
High
|
Oct 20, 2026 |
| CVE-2026-94018 |
The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length`…
|
8.8
High
|
Oct 20, 2026 |
| CVE-2026-92853 |
The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first…
|
8.7
High
|
Oct 20, 2026 |
| CVE-2026-93475 |
The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts…
|
9.3
Critical
|
Oct 20, 2026 |
| CVE-2026-103416 |
Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602…
|
9.3
Critical
|
Oct 7, 2026 |
| CVE-2026-11576 |
The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process…
|
7.5
High
|
Jun 19, 2026 |
| CVE-2025-55102 |
A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo
|
8.7
High
|
Jan 27, 2026 |