Technology · Eclipse ThreadX
Eclipse ThreadX NetX Duo vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 14 vulnerabilities in Eclipse ThreadX NetX Duo: 0 in the last 7 days and 14 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-114408, was published on 2 November 2026. 7 vulnerabilities in the last four weeks, level on the four before (7).
- Last 7 days
- 0
- Last 90 days
- 14
- Critical, all time
- 0
- Exploited in the wild
- 0
About Eclipse ThreadX NetX Duo
Dual IPv4/IPv6 networking library for ThreadX embedded systems.
Latest Eclipse ThreadX NetX Duo vulnerabilities
- CVE-2026-114408: Eclipse ThreadX NetX Duo NULL pointer dereference in ICMPv6 path MTU discoveryinfo
- CVE-2026-94018: Eclipse ThreadX NetX Duo Web HTTP server use-after-freeinfo
- CVE-2026-93003: Eclipse ThreadX NetX Duo HTTP server request framing confusioninfo
- CVE-2026-92853: NetX Secure TLS 1.3 out-of-bounds read in Certificate parserinfo
- CVE-2026-106465: NetX Secure DTLS server missing HelloVerifyRequest cookie validationinfoEPSS 0.3%
- CVE-2026-106464: Eclipse ThreadX NetX Duo X.509 signature parsing out-of-bounds readinfoEPSS 0.2%
- CVE-2026-103415: Eclipse ThreadX NetX Duo buffer overflow in TLS 1.3 HelloRetryRequestinfoEPSS 0.3%
- CVE-2026-103416: Eclipse ThreadX NetX Duo out-of-bounds write in TLS 1.3 handshake cacheinfo
- CVE-2026-102717: Eclipse ThreadX NetX Duo MQTT WebSocket setter ABI mismatchinfo
- CVE-2026-102762: NetX Duo MQTT client packet leak on malformed PUBLISHinfo
- CVE-2026-102727: FTP passive data connection not bound to authenticated control peerinfo
- CVE-2026-102724: NetX Duo NULL pointer dereference in MSRP attribute evictioninfo
- CVE-2026-102723: NetX Duo NULL pointer dereference on MSRP attribute table exhaustioninfo
- CVE-2026-102718: NetX Duo SNMP addon buffer over-read in OID parsinginfo
Most severe Eclipse ThreadX NetX Duo vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-106465: NetX Secure DTLS server missing HelloVerifyRequest cookie validationinfoEPSS 0.3%
- CVE-2026-103415: Eclipse ThreadX NetX Duo buffer overflow in TLS 1.3 HelloRetryRequestinfoEPSS 0.3%
- CVE-2026-106464: Eclipse ThreadX NetX Duo X.509 signature parsing out-of-bounds readinfoEPSS 0.2%
- CVE-2026-114408: Eclipse ThreadX NetX Duo NULL pointer dereference in ICMPv6 path MTU discoveryinfo
- CVE-2026-94018: Eclipse ThreadX NetX Duo Web HTTP server use-after-freeinfo
- CVE-2026-93003: Eclipse ThreadX NetX Duo HTTP server request framing confusioninfo
- CVE-2026-92853: NetX Secure TLS 1.3 out-of-bounds read in Certificate parserinfo
- CVE-2026-103416: Eclipse ThreadX NetX Duo out-of-bounds write in TLS 1.3 handshake cacheinfo
- CVE-2026-102717: Eclipse ThreadX NetX Duo MQTT WebSocket setter ABI mismatchinfo
- CVE-2026-102762: NetX Duo MQTT client packet leak on malformed PUBLISHinfo
Vulnerabilities per week
7 vulnerabilities in the last four weeks, level on the four before (7). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 6 | 0 | |
| 5 Oct 2026 | 1 | 0 | |
| 12 Oct 2026 | 3 | 0 | |
| 19 Oct 2026 | 3 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 1 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Eclipse ThreadX NetX Duo vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo)<a href="https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo"><img src="https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo/badge.svg" alt="Eclipse ThreadX NetX Duo vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo.json, and this page as text at https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Eclipse ThreadX NetX Duo vulnerabilities", https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo, 10 November 2026.