# Eclipse ThreadX vulnerabilities Source: https://junglewise.ai/threats/technologies/threadx Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/threadx.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 18 vulnerabilities in Eclipse ThreadX: 0 in the last 7 days and 15 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-115231, was published on 3 November 2026. 13 vulnerabilities in the last four weeks, up 550% on the four before (2). ## Counts - Last 7 days: 0 - Last 30 days: 13 - Last 90 days: 15 - All time: 18 (0 critical, 0 exploited in the wild) ## About Eclipse ThreadX Real-time operating system for embedded and IoT applications. ## Latest Eclipse ThreadX vulnerabilities - [CVE-2026-115231: Eclipse ThreadX Module Manager privilege escalation via forged callback](https://junglewise.ai/threats/cve-2026-115231-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the) (info, published 3 Nov 2026) - [CVE-2026-113421: Eclipse ThreadX Modules use-after-free in trace-buffer callback](https://junglewise.ai/threats/cve-2026-113421-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-threadx) (info, published 3 Nov 2026) - [CVE-2026-115654: Eclipse ThreadX Module Manager missing authorization in thread control](https://junglewise.ai/threats/cve-2026-115654-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the) (info, published 2 Nov 2026) - [CVE-2026-115653: Eclipse ThreadX Cortex-M stack pointer memory access in privileged mode](https://junglewise.ai/threats/cve-2026-115653-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the) (info, published 2 Nov 2026) - [CVE-2026-118052: Eclipse ThreadX Module Manager mutex deadlock in preamble size validation](https://junglewise.ai/threats/cve-2026-118052-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the) (info, published 2 Nov 2026) - [CVE-2026-95109: Eclipse ThreadX Cortex-A7 MMU Modules buffer validation bypass](https://junglewise.ai/threats/cve-2026-95109-the-cortex-a7-mmu-modules-port-validates-a-caller-supplied-buffer) (info, published 20 Oct 2026) - [CVE-2026-95108: Eclipse ThreadX Module Manager kernel stack memory leak](https://junglewise.ai/threats/cve-2026-95108-one-logical-thread-of-a-user-mode-threadx-module-costs-the-module) (info, published 20 Oct 2026) - [CVE-2026-95107: ThreadX Module Manager integer overflow in object allocation](https://junglewise.ai/threats/cve-2026-95107-a-threadx-module-chooses-object-size-when-it-calls-txm-module) (info, published 20 Oct 2026) - [CVE-2026-94202: Eclipse ThreadX Module Manager block-pool dispatcher insufficient parameter validation](https://junglewise.ai/threats/cve-2026-94202-the-module-manager-s-block-pool-create-dispatcher-proved-that-two) (info, published 20 Oct 2026) - [CVE-2026-94192: Eclipse ThreadX module object deallocation use-after-free](https://junglewise.ai/threats/cve-2026-94192-a-threadx-module-allocates-the-control-blocks-of-its-kernel) (info, published 20 Oct 2026) - [CVE-2026-94024: ThreadX Module Manager object lookup boundary check bypass](https://junglewise.ai/threats/cve-2026-94024-the-module-manager-s-object-lookup-validated-one-byte-of-a-memory) (info, published 20 Oct 2026) - [CVE-2026-94023: Eclipse ThreadX module delete dispatch ownership enforcement](https://junglewise.ai/threats/cve-2026-94023-a-threadx-module-reaches-a-kernel-object-s-delete-service-through) (info, published 20 Oct 2026) - [CVE-2026-95111: Eclipse ThreadX Module Manager queue buffer over-read](https://junglewise.ai/threats/cve-2026-95111-a-memory-protected-threadx-module-s-queue-request-reaches-the) (info, published 20 Oct 2026) - [CVE-2026-102711: Eclipse ThreadX loadable-module loader heap read overflow](https://junglewise.ai/threats/cve-2026-102711-two-issues-in-the-threadx-loadable-module-loader-reached-when-a) (info, published 29 Sep 2026) - [CVE-2026-102710: Eclipse ThreadX privilege escalation in trace callback](https://junglewise.ai/threats/cve-2026-102710-attacker-model-preconditions-a-loaded-txm-module-user-mode-txm) (info, published 29 Sep 2026) - [CVE-2025-55080: In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough…](https://junglewise.ai/threats/cve-2025-55080-in-eclipse-threadx-before-6-4-3-when-memory-protection-is-enabled) (high, CVSS 7.1, published 15 Oct 2025) - [CVE-2025-55079: In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check…](https://junglewise.ai/threats/cve-2025-55079-in-eclipse-threadx-before-version-6-4-3-the-thread-module-has-a) (medium, CVSS 5.5, published 15 Oct 2025) - [CVE-2025-55078: In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a…](https://junglewise.ai/threats/cve-2025-55078-in-eclipse-threadx-before-version-6-4-3-an-attacker-can-cause-a) (medium, CVSS 5.5, published 14 Oct 2025) ## Most severe Eclipse ThreadX vulnerabilities - [CVE-2025-55080: In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough…](https://junglewise.ai/threats/cve-2025-55080-in-eclipse-threadx-before-6-4-3-when-memory-protection-is-enabled) (high, CVSS 7.1, published 15 Oct 2025) - [CVE-2025-55079: In Eclipse ThreadX before version 6.4.3, the thread module has a setting of maximum priority. In some cases the check…](https://junglewise.ai/threats/cve-2025-55079-in-eclipse-threadx-before-version-6-4-3-the-thread-module-has-a) (medium, CVSS 5.5, published 15 Oct 2025) - [CVE-2025-55078: In Eclipse ThreadX before version 6.4.3, an attacker can cause a denial of service (crash) by providing a pointer to a…](https://junglewise.ai/threats/cve-2025-55078-in-eclipse-threadx-before-version-6-4-3-an-attacker-can-cause-a) (medium, CVSS 5.5, published 14 Oct 2025) - [CVE-2026-115231: Eclipse ThreadX Module Manager privilege escalation via forged callback](https://junglewise.ai/threats/cve-2026-115231-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the) (info, published 3 Nov 2026) - [CVE-2026-113421: Eclipse ThreadX Modules use-after-free in trace-buffer callback](https://junglewise.ai/threats/cve-2026-113421-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-threadx) (info, published 3 Nov 2026) - [CVE-2026-115654: Eclipse ThreadX Module Manager missing authorization in thread control](https://junglewise.ai/threats/cve-2026-115654-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the) (info, published 2 Nov 2026) - [CVE-2026-115653: Eclipse ThreadX Cortex-M stack pointer memory access in privileged mode](https://junglewise.ai/threats/cve-2026-115653-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the) (info, published 2 Nov 2026) - [CVE-2026-118052: Eclipse ThreadX Module Manager mutex deadlock in preamble size validation](https://junglewise.ai/threats/cve-2026-118052-in-eclipse-threadx-versions-6-0-1-through-6-5-2-202603-the) (info, published 2 Nov 2026) - [CVE-2026-95109: Eclipse ThreadX Cortex-A7 MMU Modules buffer validation bypass](https://junglewise.ai/threats/cve-2026-95109-the-cortex-a7-mmu-modules-port-validates-a-caller-supplied-buffer) (info, published 20 Oct 2026) - [CVE-2026-95108: Eclipse ThreadX Module Manager kernel stack memory leak](https://junglewise.ai/threats/cve-2026-95108-one-logical-thread-of-a-user-mode-threadx-module-costs-the-module) (info, published 20 Oct 2026) ## Vulnerabilities per week 13 vulnerabilities in the last four weeks, up 550% on the four before (2). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 2 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 8 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 5 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Eclipse technologies - [Eclipse Vert.x](https://junglewise.ai/threats/technologies/eclipse-vert-x): 16 vulnerabilities - [Eclipse Threadx Netx Duo](https://junglewise.ai/threats/technologies/threadx-netx-duo): 16 vulnerabilities - [Eclipse Kura](https://junglewise.ai/threats/technologies/eclipse-kura): 9 vulnerabilities - [Eclipse Milo](https://junglewise.ai/threats/technologies/milo): 6 vulnerabilities - [Eclipse Threadx Usbx](https://junglewise.ai/threats/technologies/threadx-usbx): 6 vulnerabilities - [Eclipse Openj9](https://junglewise.ai/threats/technologies/openj9): 5 vulnerabilities - [Eclipse Ankaios](https://junglewise.ai/threats/technologies/ankaios): 4 vulnerabilities - [Eclipse Che](https://junglewise.ai/threats/technologies/che): 4 vulnerabilities - [Eclipse Jetty](https://junglewise.ai/threats/technologies/eclipse-jetty): 3 vulnerabilities - [Eclipse NetX Duo](https://junglewise.ai/threats/technologies/eclipse-netx-duo): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Eclipse ThreadX vulnerabilities", https://junglewise.ai/threats/technologies/threadx, 11 November 2026.