# Eclipse Threadx Netx Duo vulnerabilities Source: https://junglewise.ai/threats/technologies/threadx-netx-duo Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/threadx-netx-duo.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 16 vulnerabilities in Eclipse Threadx Netx Duo: 0 in the last 7 days and 3 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-115403, was published on 2 November 2026. 2 vulnerabilities in the last four weeks, up 100% on the four before (1). ## Counts - Last 7 days: 0 - Last 30 days: 2 - Last 90 days: 3 - All time: 16 (2 critical, 0 exploited in the wild) ## About Eclipse Threadx Netx Duo An advanced, industrial-grade TCP/IP network stack designed specifically for deeply embedded real-time applications. ## Latest Eclipse Threadx Netx Duo vulnerabilities - [CVE-2026-115403: Eclipse ThreadX NetX Duo NULL pointer dereference in IPv6 raw socket send](https://junglewise.ai/threats/cve-2026-115403-in-eclipse-threadx-netx-duo-versions-6-0-through-6-5-2-202603a) (info, published 2 Nov 2026) - [CVE-2026-115215: Eclipse ThreadX NetX Duo DTLS session pool exhaustion](https://junglewise.ai/threats/cve-2026-115215-in-eclipse-threadx-netx-duo-versions-6-0-through-6-5-2-202603a) (info, published 2 Nov 2026) - [CVE-2026-102725: Eclipse ThreadX NetX Duo out-of-bounds read in MSRP attribute parsing](https://junglewise.ai/threats/cve-2026-102725-out-of-bounds-read-from-unvalidated-msrp-attribute-list-length) (info, published 29 Sep 2026) - [CVE-2025-55102: A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A…](https://junglewise.ai/threats/cve-2025-55102-a-denial-of-service-vulnerability-exists-in-the-netx-ipv6) (high, CVSS 7.5, published 27 Jan 2026) - [CVE-2025-55086: In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client…](https://junglewise.ai/threats/cve-2025-55086-in-netxduo-version-before-6-4-4-a-networking-support-module-for) (critical, CVSS 9.8, published 20 Oct 2025) - [CVE-2025-55085: In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the…](https://junglewise.ai/threats/cve-2025-55085-in-nextx-duo-before-6-4-4-in-the-http-client-module-the-network) (high, CVSS 7.5, published 17 Oct 2025) - [CVE-2025-55094: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…](https://junglewise.ai/threats/cve-2025-55094-in-netx-duo-before-6-4-4-the-networking-support-module-for) (high, CVSS 7.5, published 17 Oct 2025) - [CVE-2025-55087: In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an…](https://junglewise.ai/threats/cve-2025-55087-in-nextx-duo-s-snmp-addon-versions-before-6-4-4-a-part-of-the) (high, CVSS 7.5, published 17 Oct 2025) - [CVE-2025-55093: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…](https://junglewise.ai/threats/cve-2025-55093-in-netx-duo-before-6-4-4-the-networking-support-module-for) (medium, CVSS 5.3, published 17 Oct 2025) - [CVE-2025-55092: In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a…](https://junglewise.ai/threats/cve-2025-55092-in-eclipse-foundation-netx-duo-before-6-4-4-the-networking) (medium, CVSS 5.3, published 17 Oct 2025) - [CVE-2025-55091: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…](https://junglewise.ai/threats/cve-2025-55091-in-netx-duo-before-6-4-4-the-networking-support-module-for) (medium, CVSS 6.5, published 16 Oct 2025) - [CVE-2025-55090: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…](https://junglewise.ai/threats/cve-2025-55090-in-netx-duo-before-6-4-4-the-networking-support-module-for) (medium, CVSS 6.5, published 16 Oct 2025) - [CVE-2025-55084: In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check…](https://junglewise.ai/threats/cve-2025-55084-in-netx-duo-version-before-6-4-4-the-component-of-eclipse) (medium, CVSS 5.3, published 16 Oct 2025) - [CVE-2025-55083: In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check…](https://junglewise.ai/threats/cve-2025-55083-in-netx-duo-version-before-6-4-4-the-component-of-eclipse) (medium, CVSS 5.3, published 15 Oct 2025) - [CVE-2025-55082: In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was a potential out of bound read…](https://junglewise.ai/threats/cve-2025-55082-in-netx-duo-version-before-6-4-4-the-component-of-eclipse) (medium, CVSS 5.3, published 15 Oct 2025) - [CVE-2025-55081: In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function…](https://junglewise.ai/threats/cve-2025-55081-in-eclipse-foundation-nextx-duo-before-6-4-4-a-module-of-threadx) (critical, CVSS 9.1, published 15 Oct 2025) ## Most severe Eclipse Threadx Netx Duo vulnerabilities - [CVE-2025-55086: In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client…](https://junglewise.ai/threats/cve-2025-55086-in-netxduo-version-before-6-4-4-a-networking-support-module-for) (critical, CVSS 9.8, published 20 Oct 2025) - [CVE-2025-55081: In Eclipse Foundation NextX Duo before 6.4.4, a module of ThreadX, the _nx_secure_tls_process_clienthello() function…](https://junglewise.ai/threats/cve-2025-55081-in-eclipse-foundation-nextx-duo-before-6-4-4-a-module-of-threadx) (critical, CVSS 9.1, published 15 Oct 2025) - [CVE-2025-55085: In NextX Duo before 6.4.4, in the HTTP client module, the network support code for Eclipse Foundation ThreadX, the…](https://junglewise.ai/threats/cve-2025-55085-in-nextx-duo-before-6-4-4-in-the-http-client-module-the-network) (high, CVSS 7.5, published 17 Oct 2025) - [CVE-2025-55087: In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an…](https://junglewise.ai/threats/cve-2025-55087-in-nextx-duo-s-snmp-addon-versions-before-6-4-4-a-part-of-the) (high, CVSS 7.5, published 17 Oct 2025) - [CVE-2025-55094: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…](https://junglewise.ai/threats/cve-2025-55094-in-netx-duo-before-6-4-4-the-networking-support-module-for) (high, CVSS 7.5, published 17 Oct 2025) - [CVE-2025-55102: A denial-of-service vulnerability exists in the NetX IPv6 component functionality of Eclipse ThreadX NetX Duo. A…](https://junglewise.ai/threats/cve-2025-55102-a-denial-of-service-vulnerability-exists-in-the-netx-ipv6) (high, CVSS 7.5, published 27 Jan 2026) - [CVE-2025-55091: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…](https://junglewise.ai/threats/cve-2025-55091-in-netx-duo-before-6-4-4-the-networking-support-module-for) (medium, CVSS 6.5, published 16 Oct 2025) - [CVE-2025-55090: In NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a potential out of…](https://junglewise.ai/threats/cve-2025-55090-in-netx-duo-before-6-4-4-the-networking-support-module-for) (medium, CVSS 6.5, published 16 Oct 2025) - [CVE-2025-55092: In Eclipse Foundation NetX Duo before 6.4.4, the networking support module for Eclipse Foundation ThreadX, there was a…](https://junglewise.ai/threats/cve-2025-55092-in-eclipse-foundation-netx-duo-before-6-4-4-the-networking) (medium, CVSS 5.3, published 17 Oct 2025) - [CVE-2025-55084: In NetX Duo version before 6.4.4, the component of Eclipse Foundation ThreadX, there was an incorrect bound check…](https://junglewise.ai/threats/cve-2025-55084-in-netx-duo-version-before-6-4-4-the-component-of-eclipse) (medium, CVSS 5.3, published 16 Oct 2025) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up 100% on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 1 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 2 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Eclipse technologies - [Eclipse ThreadX](https://junglewise.ai/threats/technologies/threadx): 18 vulnerabilities - [Eclipse Vert.x](https://junglewise.ai/threats/technologies/eclipse-vert-x): 16 vulnerabilities - [Eclipse Kura](https://junglewise.ai/threats/technologies/eclipse-kura): 9 vulnerabilities - [Eclipse Milo](https://junglewise.ai/threats/technologies/milo): 6 vulnerabilities - [Eclipse Threadx Usbx](https://junglewise.ai/threats/technologies/threadx-usbx): 6 vulnerabilities - [Eclipse Openj9](https://junglewise.ai/threats/technologies/openj9): 5 vulnerabilities - [Eclipse Ankaios](https://junglewise.ai/threats/technologies/ankaios): 4 vulnerabilities - [Eclipse Che](https://junglewise.ai/threats/technologies/che): 4 vulnerabilities - [Eclipse Jetty](https://junglewise.ai/threats/technologies/eclipse-jetty): 3 vulnerabilities - [Eclipse NetX Duo](https://junglewise.ai/threats/technologies/eclipse-netx-duo): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Eclipse Threadx Netx Duo vulnerabilities", https://junglewise.ai/threats/technologies/threadx-netx-duo, 11 November 2026.