# CVE-2026-102762: NetX Duo MQTT client packet leak on malformed PUBLISH

Source: https://junglewise.ai/threats/cve-2026-102762-the-netx-duo-mqtt-client-leaks-the-packet-carrying-a-malformed  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-29. Updated: 2026-09-29  
License: CC BY 4.0 with a link back

CVE-2026-102762 · Severity: info · Published 2026-09-29

The NetX Duo MQTT client contains a memory leak when it receives malformed PUBLISH messages over the network. An attacker who can send a small number of crafted MQTT messages can exhaust the device's network packet pool, causing all inbound network traffic to stop until the device is rebooted, effectively creating a denial-of-service condition.

Technologies: [Eclipse ThreadX NetX Duo](https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo). Vendors: [Eclipse ThreadX](https://junglewise.ai/threats/vendors/eclipse-threadx).

## Quick answers

**Is CVE-2026-102762 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-102762 being exploited in the wild.

**How severe is CVE-2026-102762?** Informational severity, published 29 September 2026.

**Which products and versions are affected?** Eclipse ThreadX NetX Duo.

**Is there a fix for CVE-2026-102762?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-102762 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-102762?** Check whether you run Eclipse ThreadX NetX Duo. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The NetX Duo MQTT client fails to release network packets when processing malformed PUBLISH messages, causing a resource leak in the network driver's receive pool. An attacker with network access can trigger this by sending crafted MQTT messages, and exhausting the pool after dozens of messages will halt all inbound network traffic on the affected device. A fix exists in the updated MQTT client implementation.

## Affected products

- Eclipse ThreadX NetX Duo

## Timeline

- 2026-09-29: disclosed

## References

- [https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-9v23-qwp9-2q3h](https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-9v23-qwp9-2q3h)

## Related threats

- [Eclipse ThreadX NetX Duo NULL pointer dereference in ICMPv6 path MTU discovery](https://junglewise.ai/threats/cve-2026-114408-in-eclipse-threadx-netx-duo-versions-6-4-5-202504-through-6-5-2)
- [Eclipse ThreadX NetX Duo Web HTTP server use-after-free](https://junglewise.ai/threats/cve-2026-94018-the-web-add-on-s-http-server-dereferences-and-releases-an)
- [Eclipse ThreadX NetX Duo HTTP server request framing confusion](https://junglewise.ai/threats/cve-2026-93003-the-web-add-on-s-http-server-searches-the-entire-request-packet)
- [NetX Secure TLS 1.3 out-of-bounds read in Certificate parser](https://junglewise.ai/threats/cve-2026-92853-the-tls-1-3-certificate-message-parser-in-netx-secure-decrements)
- [NetX Secure DTLS server missing HelloVerifyRequest cookie validation](https://junglewise.ai/threats/cve-2026-106465-the-netx-secure-dtls-server-sends-a-helloverifyrequest-carrying)