{"schema_version":1,"title":"Eclipse ThreadX NetX Duo vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 14 vulnerabilities in Eclipse ThreadX NetX Duo: 0 in the last 7 days and 14 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-114408, was published on 2 November 2026. 7 vulnerabilities in the last four weeks, level on the four before (7).","url":"https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo","json_url":"https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":0,"all_time":14,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":7,"last_90_days":14,"last_365_days":14},"latest":[{"cve":"CVE-2026-114408","slug":"cve-2026-114408-in-eclipse-threadx-netx-duo-versions-6-4-5-202504-through-6-5-2","title":"Eclipse ThreadX NetX Duo NULL pointer dereference in ICMPv6 path MTU discovery","severity":"info","exploited":false,"published_at":"2026-11-02T16:17:27.733+00:00","url":"https://junglewise.ai/threats/cve-2026-114408-in-eclipse-threadx-netx-duo-versions-6-4-5-202504-through-6-5-2"},{"cve":"CVE-2026-94018","slug":"cve-2026-94018-the-web-add-on-s-http-server-dereferences-and-releases-an","title":"Eclipse ThreadX NetX Duo Web HTTP server use-after-free","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.643+00:00","url":"https://junglewise.ai/threats/cve-2026-94018-the-web-add-on-s-http-server-dereferences-and-releases-an"},{"cve":"CVE-2026-93003","slug":"cve-2026-93003-the-web-add-on-s-http-server-searches-the-entire-request-packet","title":"Eclipse ThreadX NetX Duo HTTP server request framing confusion","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.4+00:00","url":"https://junglewise.ai/threats/cve-2026-93003-the-web-add-on-s-http-server-searches-the-entire-request-packet"},{"cve":"CVE-2026-92853","slug":"cve-2026-92853-the-tls-1-3-certificate-message-parser-in-netx-secure-decrements","title":"NetX Secure TLS 1.3 out-of-bounds read in Certificate parser","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.277+00:00","url":"https://junglewise.ai/threats/cve-2026-92853-the-tls-1-3-certificate-message-parser-in-netx-secure-decrements"},{"cve":"CVE-2026-106465","epss":0.0032,"slug":"cve-2026-106465-the-netx-secure-dtls-server-sends-a-helloverifyrequest-carrying","title":"NetX Secure DTLS server missing HelloVerifyRequest cookie validation","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:25.093+00:00","url":"https://junglewise.ai/threats/cve-2026-106465-the-netx-secure-dtls-server-sends-a-helloverifyrequest-carrying"},{"cve":"CVE-2026-106464","epss":0.0018,"slug":"cve-2026-106464-nx-secure-x509-parse-signature-data-computes-the-certificate","title":"Eclipse ThreadX NetX Duo X.509 signature parsing out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:24.96+00:00","url":"https://junglewise.ai/threats/cve-2026-106464-nx-secure-x509-parse-signature-data-computes-the-certificate"},{"cve":"CVE-2026-103415","epss":0.0028,"slug":"cve-2026-103415-when-a-tls-1-3-client-processes-a-helloretryrequest-it-copies","title":"Eclipse ThreadX NetX Duo buffer overflow in TLS 1.3 HelloRetryRequest","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:19.79+00:00","url":"https://junglewise.ai/threats/cve-2026-103415-when-a-tls-1-3-client-processes-a-helloretryrequest-it-copies"},{"cve":"CVE-2026-103416","slug":"cve-2026-103416-out-of-bounds-write-via-the-tls-1-3-handshake-message-cache-in","title":"Eclipse ThreadX NetX Duo out-of-bounds write in TLS 1.3 handshake cache","severity":"info","exploited":false,"published_at":"2026-10-07T09:17:04.647+00:00","url":"https://junglewise.ai/threats/cve-2026-103416-out-of-bounds-write-via-the-tls-1-3-handshake-message-cache-in"},{"cve":"CVE-2026-102717","slug":"cve-2026-102717-mqtt-websocket-setter-abi-mismatch-may-disclose-memory-or-cause","title":"Eclipse ThreadX NetX Duo MQTT WebSocket setter ABI mismatch","severity":"info","exploited":false,"published_at":"2026-09-30T15:22:21.957+00:00","url":"https://junglewise.ai/threats/cve-2026-102717-mqtt-websocket-setter-abi-mismatch-may-disclose-memory-or-cause"},{"cve":"CVE-2026-102762","slug":"cve-2026-102762-the-netx-duo-mqtt-client-leaks-the-packet-carrying-a-malformed","title":"NetX Duo MQTT client packet leak on malformed PUBLISH","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:13.59+00:00","url":"https://junglewise.ai/threats/cve-2026-102762-the-netx-duo-mqtt-client-leaks-the-packet-carrying-a-malformed"},{"cve":"CVE-2026-102727","slug":"cve-2026-102727-ftp-passive-data-connection-not-bound-to-the-authenticated","title":"FTP passive data connection not bound to authenticated control peer","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:12.363+00:00","url":"https://junglewise.ai/threats/cve-2026-102727-ftp-passive-data-connection-not-bound-to-the-authenticated"},{"cve":"CVE-2026-102724","slug":"cve-2026-102724-null-pointer-dereference-when-evicting-the-sole-msrp-attribute","title":"NetX Duo NULL pointer dereference in MSRP attribute eviction","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:11.96+00:00","url":"https://junglewise.ai/threats/cve-2026-102724-null-pointer-dereference-when-evicting-the-sole-msrp-attribute"},{"cve":"CVE-2026-102723","slug":"cve-2026-102723-null-pointer-dereference-on-msrp-attribute-table-exhaustion","title":"NetX Duo NULL pointer dereference on MSRP attribute table exhaustion","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:11.83+00:00","url":"https://junglewise.ai/threats/cve-2026-102723-null-pointer-dereference-on-msrp-attribute-table-exhaustion"},{"cve":"CVE-2026-102718","slug":"cve-2026-102718-hey-nx-snmp-utility-object-id-get-in-the-netx-duo-snmp-addon","title":"NetX Duo SNMP addon buffer over-read in OID parsing","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:11.103+00:00","url":"https://junglewise.ai/threats/cve-2026-102718-hey-nx-snmp-utility-object-id-get-in-the-netx-duo-snmp-addon"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Eclipse ThreadX GUIX","slug":"guix","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/guix"},{"name":"Eclipse ThreadX NetX Secure","slug":"eclipse-threadx-netx-secure","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/eclipse-threadx-netx-secure"}],"technology":{"hub":true,"name":"Eclipse ThreadX NetX Duo","slug":"eclipse-threadx-netx-duo","vendor":{"hub":true,"name":"Eclipse ThreadX","slug":"eclipse-threadx","url":"https://junglewise.ai/threats/vendors/eclipse-threadx"},"aliases":[],"category":"library","description":"Dual IPv4/IPv6 networking library for ThreadX embedded systems.","url":"https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo"},"most_severe":[{"cve":"CVE-2026-106465","epss":0.0032,"slug":"cve-2026-106465-the-netx-secure-dtls-server-sends-a-helloverifyrequest-carrying","title":"NetX Secure DTLS server missing HelloVerifyRequest cookie validation","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:25.093+00:00","url":"https://junglewise.ai/threats/cve-2026-106465-the-netx-secure-dtls-server-sends-a-helloverifyrequest-carrying"},{"cve":"CVE-2026-103415","epss":0.0028,"slug":"cve-2026-103415-when-a-tls-1-3-client-processes-a-helloretryrequest-it-copies","title":"Eclipse ThreadX NetX Duo buffer overflow in TLS 1.3 HelloRetryRequest","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:19.79+00:00","url":"https://junglewise.ai/threats/cve-2026-103415-when-a-tls-1-3-client-processes-a-helloretryrequest-it-copies"},{"cve":"CVE-2026-106464","epss":0.0018,"slug":"cve-2026-106464-nx-secure-x509-parse-signature-data-computes-the-certificate","title":"Eclipse ThreadX NetX Duo X.509 signature parsing out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:24.96+00:00","url":"https://junglewise.ai/threats/cve-2026-106464-nx-secure-x509-parse-signature-data-computes-the-certificate"},{"cve":"CVE-2026-114408","slug":"cve-2026-114408-in-eclipse-threadx-netx-duo-versions-6-4-5-202504-through-6-5-2","title":"Eclipse ThreadX NetX Duo NULL pointer dereference in ICMPv6 path MTU discovery","severity":"info","exploited":false,"published_at":"2026-11-02T16:17:27.733+00:00","url":"https://junglewise.ai/threats/cve-2026-114408-in-eclipse-threadx-netx-duo-versions-6-4-5-202504-through-6-5-2"},{"cve":"CVE-2026-94018","slug":"cve-2026-94018-the-web-add-on-s-http-server-dereferences-and-releases-an","title":"Eclipse ThreadX NetX Duo Web HTTP server use-after-free","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.643+00:00","url":"https://junglewise.ai/threats/cve-2026-94018-the-web-add-on-s-http-server-dereferences-and-releases-an"},{"cve":"CVE-2026-93003","slug":"cve-2026-93003-the-web-add-on-s-http-server-searches-the-entire-request-packet","title":"Eclipse ThreadX NetX Duo HTTP server request framing confusion","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.4+00:00","url":"https://junglewise.ai/threats/cve-2026-93003-the-web-add-on-s-http-server-searches-the-entire-request-packet"},{"cve":"CVE-2026-92853","slug":"cve-2026-92853-the-tls-1-3-certificate-message-parser-in-netx-secure-decrements","title":"NetX Secure TLS 1.3 out-of-bounds read in Certificate parser","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.277+00:00","url":"https://junglewise.ai/threats/cve-2026-92853-the-tls-1-3-certificate-message-parser-in-netx-secure-decrements"},{"cve":"CVE-2026-103416","slug":"cve-2026-103416-out-of-bounds-write-via-the-tls-1-3-handshake-message-cache-in","title":"Eclipse ThreadX NetX Duo out-of-bounds write in TLS 1.3 handshake cache","severity":"info","exploited":false,"published_at":"2026-10-07T09:17:04.647+00:00","url":"https://junglewise.ai/threats/cve-2026-103416-out-of-bounds-write-via-the-tls-1-3-handshake-message-cache-in"},{"cve":"CVE-2026-102717","slug":"cve-2026-102717-mqtt-websocket-setter-abi-mismatch-may-disclose-memory-or-cause","title":"Eclipse ThreadX NetX Duo MQTT WebSocket setter ABI mismatch","severity":"info","exploited":false,"published_at":"2026-09-30T15:22:21.957+00:00","url":"https://junglewise.ai/threats/cve-2026-102717-mqtt-websocket-setter-abi-mismatch-may-disclose-memory-or-cause"},{"cve":"CVE-2026-102762","slug":"cve-2026-102762-the-netx-duo-mqtt-client-leaks-the-packet-carrying-a-malformed","title":"NetX Duo MQTT client packet leak on malformed PUBLISH","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:13.59+00:00","url":"https://junglewise.ai/threats/cve-2026-102762-the-netx-duo-mqtt-client-leaks-the-packet-carrying-a-malformed"}],"generated_at":"2026-11-10T03:07:00.198065+00:00"}