{"schema_version":1,"title":"Eclipse Threadx Netx Duo vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in Eclipse Threadx Netx Duo: 0 in the last 7 days and 3 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-115403, was published on 2 November 2026. 2 vulnerabilities in the last four weeks, up 100% on the four before (1).","url":"https://junglewise.ai/threats/technologies/threadx-netx-duo","json_url":"https://junglewise.ai/threats/technologies/threadx-netx-duo.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/threadx-netx-duo","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":4,"all_time":16,"critical":2,"exploited":0,"last_7_days":0,"last_30_days":2,"last_90_days":3,"last_365_days":4},"latest":[{"cve":"CVE-2026-115403","slug":"cve-2026-115403-in-eclipse-threadx-netx-duo-versions-6-0-through-6-5-2-202603a","title":"Eclipse ThreadX NetX Duo NULL pointer dereference in IPv6 raw socket send","severity":"info","exploited":false,"published_at":"2026-11-02T22:17:18.543+00:00","url":"https://junglewise.ai/threats/cve-2026-115403-in-eclipse-threadx-netx-duo-versions-6-0-through-6-5-2-202603a"},{"cve":"CVE-2026-115215","slug":"cve-2026-115215-in-eclipse-threadx-netx-duo-versions-6-0-through-6-5-2-202603a","title":"Eclipse ThreadX NetX Duo DTLS session pool exhaustion","severity":"info","exploited":false,"published_at":"2026-11-02T22:17:18.397+00:00","url":"https://junglewise.ai/threats/cve-2026-115215-in-eclipse-threadx-netx-duo-versions-6-0-through-6-5-2-202603a"},{"cve":"CVE-2026-102725","slug":"cve-2026-102725-out-of-bounds-read-from-unvalidated-msrp-attribute-list-length","title":"Eclipse ThreadX NetX Duo out-of-bounds read in MSRP attribute parsing","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:12.093+00:00","url":"https://junglewise.ai/threats/cve-2026-102725-out-of-bounds-read-from-unvalidated-msrp-attribute-list-length"},{"cve":"CVE-2025-55102","cvss":7.5,"epss":0.004,"slug":"cve-2025-55102-a-denial-of-service-vulnerability-exists-in-the-netx-ipv6","title":"A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A…","severity":"high","exploited":false,"published_at":"2026-01-27T16:16:15.113+00:00","url":"https://junglewise.ai/threats/cve-2025-55102-a-denial-of-service-vulnerability-exists-in-the-netx-ipv6"},{"cve":"CVE-2025-55086","cvss":9.8,"epss":0.0041,"slug":"cve-2025-55086-in-netxduo-version-before-6-4-4-a-networking-support-module-for","title":"In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client…","severity":"critical","exploited":false,"published_at":"2025-10-20T18:15:39.813+00:00","url":"https://junglewise.ai/threats/cve-2025-55086-in-netxduo-version-before-6-4-4-a-networking-support-module-for"},{"cve":"CVE-2025-55085","cvss":7.5,"epss":0.0061,"slug":"cve-2025-55085-in-nextx-duo-before-6-4-4-in-the-http-client-module-the-network","title":"In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the…","severity":"high","exploited":false,"published_at":"2025-10-17T15:15:38.907+00:00","url":"https://junglewise.ai/threats/cve-2025-55085-in-nextx-duo-before-6-4-4-in-the-http-client-module-the-network"},{"cve":"CVE-2025-55094","cvss":7.5,"epss":0.0041,"slug":"cve-2025-55094-in-netx-duo-before-6-4-4-the-networking-support-module-for","title":"In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…","severity":"high","exploited":false,"published_at":"2025-10-17T06:15:35.49+00:00","url":"https://junglewise.ai/threats/cve-2025-55094-in-netx-duo-before-6-4-4-the-networking-support-module-for"},{"cve":"CVE-2025-55087","cvss":7.5,"epss":0.0046,"slug":"cve-2025-55087-in-nextx-duo-s-snmp-addon-versions-before-6-4-4-a-part-of-the","title":"In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an…","severity":"high","exploited":false,"published_at":"2025-10-17T06:15:34.753+00:00","url":"https://junglewise.ai/threats/cve-2025-55087-in-nextx-duo-s-snmp-addon-versions-before-6-4-4-a-part-of-the"},{"cve":"CVE-2025-55093","cvss":5.3,"epss":0.0031,"slug":"cve-2025-55093-in-netx-duo-before-6-4-4-the-networking-support-module-for","title":"In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…","severity":"medium","exploited":false,"published_at":"2025-10-17T05:15:35.14+00:00","url":"https://junglewise.ai/threats/cve-2025-55093-in-netx-duo-before-6-4-4-the-networking-support-module-for"},{"cve":"CVE-2025-55092","cvss":5.3,"epss":0.0033,"slug":"cve-2025-55092-in-eclipse-foundation-netx-duo-before-6-4-4-the-networking","title":"In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a…","severity":"medium","exploited":false,"published_at":"2025-10-17T05:15:35+00:00","url":"https://junglewise.ai/threats/cve-2025-55092-in-eclipse-foundation-netx-duo-before-6-4-4-the-networking"},{"cve":"CVE-2025-55091","cvss":6.5,"epss":0.0037,"slug":"cve-2025-55091-in-netx-duo-before-6-4-4-the-networking-support-module-for","title":"In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…","severity":"medium","exploited":false,"published_at":"2025-10-16T08:15:36.093+00:00","url":"https://junglewise.ai/threats/cve-2025-55091-in-netx-duo-before-6-4-4-the-networking-support-module-for"},{"cve":"CVE-2025-55090","cvss":6.5,"epss":0.0037,"slug":"cve-2025-55090-in-netx-duo-before-6-4-4-the-networking-support-module-for","title":"In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…","severity":"medium","exploited":false,"published_at":"2025-10-16T07:15:33.52+00:00","url":"https://junglewise.ai/threats/cve-2025-55090-in-netx-duo-before-6-4-4-the-networking-support-module-for"},{"cve":"CVE-2025-55084","cvss":5.3,"epss":0.0033,"slug":"cve-2025-55084-in-netx-duo-version-before-6-4-4-the-component-of-eclipse","title":"In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check…","severity":"medium","exploited":false,"published_at":"2025-10-16T07:15:33.09+00:00","url":"https://junglewise.ai/threats/cve-2025-55084-in-netx-duo-version-before-6-4-4-the-component-of-eclipse"},{"cve":"CVE-2025-55083","cvss":5.3,"epss":0.0025,"slug":"cve-2025-55083-in-netx-duo-version-before-6-4-4-the-component-of-eclipse","title":"In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check…","severity":"medium","exploited":false,"published_at":"2025-10-15T15:16:04.217+00:00","url":"https://junglewise.ai/threats/cve-2025-55083-in-netx-duo-version-before-6-4-4-the-component-of-eclipse"},{"cve":"CVE-2025-55082","cvss":5.3,"epss":0.0025,"slug":"cve-2025-55082-in-netx-duo-version-before-6-4-4-the-component-of-eclipse","title":"In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was a potential out of bound read…","severity":"medium","exploited":false,"published_at":"2025-10-15T11:15:39.547+00:00","url":"https://junglewise.ai/threats/cve-2025-55082-in-netx-duo-version-before-6-4-4-the-component-of-eclipse"},{"cve":"CVE-2025-55081","cvss":9.1,"epss":0.0037,"slug":"cve-2025-55081-in-eclipse-foundation-nextx-duo-before-6-4-4-a-module-of-threadx","title":"In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function…","severity":"critical","exploited":false,"published_at":"2025-10-15T11:15:39.063+00:00","url":"https://junglewise.ai/threats/cve-2025-55081-in-eclipse-foundation-nextx-duo-before-6-4-4-a-module-of-threadx"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Eclipse ThreadX","slug":"threadx","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/threadx"},{"name":"Eclipse Vert.x","slug":"eclipse-vert-x","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/eclipse-vert-x"},{"name":"Eclipse Kura","slug":"eclipse-kura","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/eclipse-kura"},{"name":"Eclipse Milo","slug":"milo","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/milo"},{"name":"Eclipse Threadx Usbx","slug":"threadx-usbx","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/threadx-usbx"},{"name":"Eclipse Openj9","slug":"openj9","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/openj9"},{"name":"Eclipse Ankaios","slug":"ankaios","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/ankaios"},{"name":"Eclipse Che","slug":"che","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/che"},{"name":"Eclipse Jetty","slug":"eclipse-jetty","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/eclipse-jetty"},{"name":"Eclipse NetX Duo","slug":"eclipse-netx-duo","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/eclipse-netx-duo"}],"technology":{"hub":true,"name":"Eclipse Threadx Netx Duo","slug":"threadx-netx-duo","vendor":{"hub":true,"name":"Eclipse","slug":"eclipse","url":"https://junglewise.ai/threats/vendors/eclipse"},"aliases":[],"category":"os","homepage":"https://www.eclipse.org/netxduo/","repo_url":"https://github.com/eclipse-threadx/netxduo","description":"An advanced, industrial-grade TCP/IP network stack designed specifically for deeply embedded real-time applications.","url":"https://junglewise.ai/threats/technologies/threadx-netx-duo"},"most_severe":[{"cve":"CVE-2025-55086","cvss":9.8,"epss":0.0041,"slug":"cve-2025-55086-in-netxduo-version-before-6-4-4-a-networking-support-module-for","title":"In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client…","severity":"critical","exploited":false,"published_at":"2025-10-20T18:15:39.813+00:00","url":"https://junglewise.ai/threats/cve-2025-55086-in-netxduo-version-before-6-4-4-a-networking-support-module-for"},{"cve":"CVE-2025-55081","cvss":9.1,"epss":0.0037,"slug":"cve-2025-55081-in-eclipse-foundation-nextx-duo-before-6-4-4-a-module-of-threadx","title":"In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function…","severity":"critical","exploited":false,"published_at":"2025-10-15T11:15:39.063+00:00","url":"https://junglewise.ai/threats/cve-2025-55081-in-eclipse-foundation-nextx-duo-before-6-4-4-a-module-of-threadx"},{"cve":"CVE-2025-55085","cvss":7.5,"epss":0.0061,"slug":"cve-2025-55085-in-nextx-duo-before-6-4-4-in-the-http-client-module-the-network","title":"In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the…","severity":"high","exploited":false,"published_at":"2025-10-17T15:15:38.907+00:00","url":"https://junglewise.ai/threats/cve-2025-55085-in-nextx-duo-before-6-4-4-in-the-http-client-module-the-network"},{"cve":"CVE-2025-55087","cvss":7.5,"epss":0.0046,"slug":"cve-2025-55087-in-nextx-duo-s-snmp-addon-versions-before-6-4-4-a-part-of-the","title":"In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an…","severity":"high","exploited":false,"published_at":"2025-10-17T06:15:34.753+00:00","url":"https://junglewise.ai/threats/cve-2025-55087-in-nextx-duo-s-snmp-addon-versions-before-6-4-4-a-part-of-the"},{"cve":"CVE-2025-55094","cvss":7.5,"epss":0.0041,"slug":"cve-2025-55094-in-netx-duo-before-6-4-4-the-networking-support-module-for","title":"In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…","severity":"high","exploited":false,"published_at":"2025-10-17T06:15:35.49+00:00","url":"https://junglewise.ai/threats/cve-2025-55094-in-netx-duo-before-6-4-4-the-networking-support-module-for"},{"cve":"CVE-2025-55102","cvss":7.5,"epss":0.004,"slug":"cve-2025-55102-a-denial-of-service-vulnerability-exists-in-the-netx-ipv6","title":"A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A…","severity":"high","exploited":false,"published_at":"2026-01-27T16:16:15.113+00:00","url":"https://junglewise.ai/threats/cve-2025-55102-a-denial-of-service-vulnerability-exists-in-the-netx-ipv6"},{"cve":"CVE-2025-55091","cvss":6.5,"epss":0.0037,"slug":"cve-2025-55091-in-netx-duo-before-6-4-4-the-networking-support-module-for","title":"In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…","severity":"medium","exploited":false,"published_at":"2025-10-16T08:15:36.093+00:00","url":"https://junglewise.ai/threats/cve-2025-55091-in-netx-duo-before-6-4-4-the-networking-support-module-for"},{"cve":"CVE-2025-55090","cvss":6.5,"epss":0.0037,"slug":"cve-2025-55090-in-netx-duo-before-6-4-4-the-networking-support-module-for","title":"In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…","severity":"medium","exploited":false,"published_at":"2025-10-16T07:15:33.52+00:00","url":"https://junglewise.ai/threats/cve-2025-55090-in-netx-duo-before-6-4-4-the-networking-support-module-for"},{"cve":"CVE-2025-55092","cvss":5.3,"epss":0.0033,"slug":"cve-2025-55092-in-eclipse-foundation-netx-duo-before-6-4-4-the-networking","title":"In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a…","severity":"medium","exploited":false,"published_at":"2025-10-17T05:15:35+00:00","url":"https://junglewise.ai/threats/cve-2025-55092-in-eclipse-foundation-netx-duo-before-6-4-4-the-networking"},{"cve":"CVE-2025-55084","cvss":5.3,"epss":0.0033,"slug":"cve-2025-55084-in-netx-duo-version-before-6-4-4-the-component-of-eclipse","title":"In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check…","severity":"medium","exploited":false,"published_at":"2025-10-16T07:15:33.09+00:00","url":"https://junglewise.ai/threats/cve-2025-55084-in-netx-duo-version-before-6-4-4-the-component-of-eclipse"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}