{"schema_version":1,"title":"Eclipse ThreadX vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 31 vulnerabilities in Eclipse ThreadX: 0 in the last 7 days and 31 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-114408, was published on 2 November 2026. 19 vulnerabilities in the last four weeks, up 58% on the four before (12). 3 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/eclipse-threadx","json_url":"https://junglewise.ai/threats/vendors/eclipse-threadx.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/eclipse-threadx","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":1,"all_time":31,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":19,"last_90_days":31,"last_365_days":31},"latest":[{"cve":"CVE-2026-114408","slug":"cve-2026-114408-in-eclipse-threadx-netx-duo-versions-6-4-5-202504-through-6-5-2","title":"Eclipse ThreadX NetX Duo NULL pointer dereference in ICMPv6 path MTU discovery","severity":"info","exploited":false,"published_at":"2026-11-02T16:17:27.733+00:00","url":"https://junglewise.ai/threats/cve-2026-114408-in-eclipse-threadx-netx-duo-versions-6-4-5-202504-through-6-5-2"},{"cve":"CVE-2026-94018","slug":"cve-2026-94018-the-web-add-on-s-http-server-dereferences-and-releases-an","title":"Eclipse ThreadX NetX Duo Web HTTP server use-after-free","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.643+00:00","url":"https://junglewise.ai/threats/cve-2026-94018-the-web-add-on-s-http-server-dereferences-and-releases-an"},{"cve":"CVE-2026-93475","slug":"cve-2026-93475-the-x-509-parser-in-netx-secure-accepts-an-rsa-public-key-of-any","title":"NetX Secure X.509 parser out-of-bounds write in RSA signature verification","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.52+00:00","url":"https://junglewise.ai/threats/cve-2026-93475-the-x-509-parser-in-netx-secure-accepts-an-rsa-public-key-of-any"},{"cve":"CVE-2026-93003","slug":"cve-2026-93003-the-web-add-on-s-http-server-searches-the-entire-request-packet","title":"Eclipse ThreadX NetX Duo HTTP server request framing confusion","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.4+00:00","url":"https://junglewise.ai/threats/cve-2026-93003-the-web-add-on-s-http-server-searches-the-entire-request-packet"},{"cve":"CVE-2026-92853","slug":"cve-2026-92853-the-tls-1-3-certificate-message-parser-in-netx-secure-decrements","title":"NetX Secure TLS 1.3 out-of-bounds read in Certificate parser","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.277+00:00","url":"https://junglewise.ai/threats/cve-2026-92853-the-tls-1-3-certificate-message-parser-in-netx-secure-decrements"},{"cve":"CVE-2026-91057","slug":"cve-2026-91057-gx-multi-line-text-view-display-info-get-reads-one-byte-past-the","title":"Eclipse ThreadX GUIX multi-line text view out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:16.26+00:00","url":"https://junglewise.ai/threats/cve-2026-91057-gx-multi-line-text-view-display-info-get-reads-one-byte-past-the"},{"cve":"CVE-2026-92454","cvss":6.1,"slug":"cve-2026-92454-the-guix-software-jpeg-decoder-reads-four-kinds-of-marker-segment","title":"GUIX JPEG decoder buffer over-read and infinite loop","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:36.757+00:00","url":"https://junglewise.ai/threats/cve-2026-92454-the-guix-software-jpeg-decoder-reads-four-kinds-of-marker-segment"},{"cve":"CVE-2026-92449","slug":"cve-2026-92449-gx-binres-pixelmap-table-load-in-the-guix-binary-resource-theme","title":"Eclipse ThreadX GUIX binary resource heap buffer overflow","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.617+00:00","url":"https://junglewise.ai/threats/cve-2026-92449-gx-binres-pixelmap-table-load-in-the-guix-binary-resource-theme"},{"cve":"CVE-2026-92446","slug":"cve-2026-92446-gx-binres-theme-load-and-gx-binres-font-load-take-the-resource-as","title":"Eclipse ThreadX GUIX binary resource loader out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.477+00:00","url":"https://junglewise.ai/threats/cve-2026-92446-gx-binres-theme-load-and-gx-binres-font-load-take-the-resource-as"},{"cve":"CVE-2026-91189","slug":"cve-2026-91189-the-guix-binary-resource-loader-never-checks-that-a-font-page-s","title":"Eclipse ThreadX GUIX binary resource loader integer underflow in font parsing","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.167+00:00","url":"https://junglewise.ai/threats/cve-2026-91189-the-guix-binary-resource-loader-never-checks-that-a-font-page-s"},{"cve":"CVE-2026-91186","slug":"cve-2026-91186-the-png-chunk-reader-has-no-notion-of-chunk-ordering-it-records","title":"Eclipse ThreadX GUIX PNG decoder heap overflow on duplicate IHDR","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:36.023+00:00","url":"https://junglewise.ai/threats/cve-2026-91186-the-png-chunk-reader-has-no-notion-of-chunk-ordering-it-records"},{"cve":"CVE-2026-91059","slug":"cve-2026-91059-the-guix-jpeg-software-decoder-enforces-no-ordering-on-jpeg","title":"GUIX JPEG decoder out-of-bounds read via malformed marker ordering","severity":"info","exploited":false,"published_at":"2026-10-20T15:17:35.873+00:00","url":"https://junglewise.ai/threats/cve-2026-91059-the-guix-jpeg-software-decoder-enforces-no-ordering-on-jpeg"},{"cve":"CVE-2026-96582","cvss":4.9,"slug":"cve-2026-96582-a-hid-report-descriptor-is-a-sequence-of-items-each-declaring-in","title":"USBX HID report descriptor out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-20T14:17:04.833+00:00","url":"https://junglewise.ai/threats/cve-2026-96582-a-hid-report-descriptor-is-a-sequence-of-items-each-declaring-in"},{"cve":"CVE-2026-96406","cvss":4.9,"slug":"cve-2026-96406-a-videostreaming-interface-reports-the-size-of-its-whole-class","title":"Eclipse ThreadX USBX VIDEO descriptor buffer over-read","severity":"medium","exploited":false,"published_at":"2026-10-20T14:17:04.707+00:00","url":"https://junglewise.ai/threats/cve-2026-96406-a-videostreaming-interface-reports-the-size-of-its-whole-class"},{"cve":"CVE-2026-91041","cvss":7.8,"slug":"cve-2026-91041-mounting-an-attacker-controlled-fat-image-with-fault-tolerance","title":"Eclipse ThreadX FileX out-of-bounds heap write in fault-tolerant log replay","severity":"high","exploited":false,"published_at":"2026-10-20T14:17:04.35+00:00","url":"https://junglewise.ai/threats/cve-2026-91041-mounting-an-attacker-controlled-fat-image-with-fault-tolerance"},{"cve":"CVE-2026-106465","epss":0.0032,"slug":"cve-2026-106465-the-netx-secure-dtls-server-sends-a-helloverifyrequest-carrying","title":"NetX Secure DTLS server missing HelloVerifyRequest cookie validation","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:25.093+00:00","url":"https://junglewise.ai/threats/cve-2026-106465-the-netx-secure-dtls-server-sends-a-helloverifyrequest-carrying"},{"cve":"CVE-2026-106464","epss":0.0018,"slug":"cve-2026-106464-nx-secure-x509-parse-signature-data-computes-the-certificate","title":"Eclipse ThreadX NetX Duo X.509 signature parsing out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:24.96+00:00","url":"https://junglewise.ai/threats/cve-2026-106464-nx-secure-x509-parse-signature-data-computes-the-certificate"},{"cve":"CVE-2026-103415","epss":0.0028,"slug":"cve-2026-103415-when-a-tls-1-3-client-processes-a-helloretryrequest-it-copies","title":"Eclipse ThreadX NetX Duo buffer overflow in TLS 1.3 HelloRetryRequest","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:19.79+00:00","url":"https://junglewise.ai/threats/cve-2026-103415-when-a-tls-1-3-client-processes-a-helloretryrequest-it-copies"},{"cve":"CVE-2026-103414","epss":0.0016,"slug":"cve-2026-103414-the-guix-binary-resource-theme-loader-sizes-its-arena-and","title":"Eclipse ThreadX GUIX binary resource loader heap overflow","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:19.637+00:00","url":"https://junglewise.ai/threats/cve-2026-103414-the-guix-binary-resource-theme-loader-sizes-its-arena-and"},{"cve":"CVE-2026-103416","slug":"cve-2026-103416-out-of-bounds-write-via-the-tls-1-3-handshake-message-cache-in","title":"Eclipse ThreadX NetX Duo out-of-bounds write in TLS 1.3 handshake cache","severity":"info","exploited":false,"published_at":"2026-10-07T09:17:04.647+00:00","url":"https://junglewise.ai/threats/cve-2026-103416-out-of-bounds-write-via-the-tls-1-3-handshake-message-cache-in"},{"cve":"CVE-2026-102717","slug":"cve-2026-102717-mqtt-websocket-setter-abi-mismatch-may-disclose-memory-or-cause","title":"Eclipse ThreadX NetX Duo MQTT WebSocket setter ABI mismatch","severity":"info","exploited":false,"published_at":"2026-09-30T15:22:21.957+00:00","url":"https://junglewise.ai/threats/cve-2026-102717-mqtt-websocket-setter-abi-mismatch-may-disclose-memory-or-cause"},{"cve":"CVE-2026-102762","slug":"cve-2026-102762-the-netx-duo-mqtt-client-leaks-the-packet-carrying-a-malformed","title":"NetX Duo MQTT client packet leak on malformed PUBLISH","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:13.59+00:00","url":"https://junglewise.ai/threats/cve-2026-102762-the-netx-duo-mqtt-client-leaks-the-packet-carrying-a-malformed"},{"cve":"CVE-2026-102760","slug":"cve-2026-102760-when-netx-secure-is-built-with-nx-secure-key-clear-every-tls","title":"NetX Secure memory corruption in NX_SECURE_KEY_CLEAR","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:13.313+00:00","url":"https://junglewise.ai/threats/cve-2026-102760-when-netx-secure-is-built-with-nx-secure-key-clear-every-tls"},{"cve":"CVE-2026-102759","slug":"cve-2026-102759-netx-secure-tls-accepts-an-empty-application-data-record-without","title":"NetX Secure TLS MAC verification bypass in application-data records","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:13.177+00:00","url":"https://junglewise.ai/threats/cve-2026-102759-netx-secure-tls-accepts-an-empty-application-data-record-without"},{"cve":"CVE-2026-102730","slug":"cve-2026-102730-mounting-an-attacker-controlled-nand-flash-image-lx-nand-flash","title":"LevelX NAND flash metadata parser heap overflow","severity":"info","exploited":false,"published_at":"2026-09-29T18:17:12.77+00:00","url":"https://junglewise.ai/threats/cve-2026-102730-mounting-an-attacker-controlled-nand-flash-image-lx-nand-flash"}],"vendor":{"hub":true,"name":"Eclipse ThreadX","slug":"eclipse-threadx","description":"Open-source real-time operating system and middleware stack for embedded systems.","url":"https://junglewise.ai/threats/vendors/eclipse-threadx"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":11},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":14},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-91041","cvss":7.8,"slug":"cve-2026-91041-mounting-an-attacker-controlled-fat-image-with-fault-tolerance","title":"Eclipse ThreadX FileX out-of-bounds heap write in fault-tolerant log replay","severity":"high","exploited":false,"published_at":"2026-10-20T14:17:04.35+00:00","url":"https://junglewise.ai/threats/cve-2026-91041-mounting-an-attacker-controlled-fat-image-with-fault-tolerance"},{"cve":"CVE-2026-92454","cvss":6.1,"slug":"cve-2026-92454-the-guix-software-jpeg-decoder-reads-four-kinds-of-marker-segment","title":"GUIX JPEG decoder buffer over-read and infinite loop","severity":"medium","exploited":false,"published_at":"2026-10-20T15:17:36.757+00:00","url":"https://junglewise.ai/threats/cve-2026-92454-the-guix-software-jpeg-decoder-reads-four-kinds-of-marker-segment"},{"cve":"CVE-2026-96582","cvss":4.9,"slug":"cve-2026-96582-a-hid-report-descriptor-is-a-sequence-of-items-each-declaring-in","title":"USBX HID report descriptor out-of-bounds read","severity":"medium","exploited":false,"published_at":"2026-10-20T14:17:04.833+00:00","url":"https://junglewise.ai/threats/cve-2026-96582-a-hid-report-descriptor-is-a-sequence-of-items-each-declaring-in"},{"cve":"CVE-2026-96406","cvss":4.9,"slug":"cve-2026-96406-a-videostreaming-interface-reports-the-size-of-its-whole-class","title":"Eclipse ThreadX USBX VIDEO descriptor buffer over-read","severity":"medium","exploited":false,"published_at":"2026-10-20T14:17:04.707+00:00","url":"https://junglewise.ai/threats/cve-2026-96406-a-videostreaming-interface-reports-the-size-of-its-whole-class"},{"cve":"CVE-2026-106465","epss":0.0032,"slug":"cve-2026-106465-the-netx-secure-dtls-server-sends-a-helloverifyrequest-carrying","title":"NetX Secure DTLS server missing HelloVerifyRequest cookie validation","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:25.093+00:00","url":"https://junglewise.ai/threats/cve-2026-106465-the-netx-secure-dtls-server-sends-a-helloverifyrequest-carrying"},{"cve":"CVE-2026-103415","epss":0.0028,"slug":"cve-2026-103415-when-a-tls-1-3-client-processes-a-helloretryrequest-it-copies","title":"Eclipse ThreadX NetX Duo buffer overflow in TLS 1.3 HelloRetryRequest","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:19.79+00:00","url":"https://junglewise.ai/threats/cve-2026-103415-when-a-tls-1-3-client-processes-a-helloretryrequest-it-copies"},{"cve":"CVE-2026-106464","epss":0.0018,"slug":"cve-2026-106464-nx-secure-x509-parse-signature-data-computes-the-certificate","title":"Eclipse ThreadX NetX Duo X.509 signature parsing out-of-bounds read","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:24.96+00:00","url":"https://junglewise.ai/threats/cve-2026-106464-nx-secure-x509-parse-signature-data-computes-the-certificate"},{"cve":"CVE-2026-103414","epss":0.0016,"slug":"cve-2026-103414-the-guix-binary-resource-theme-loader-sizes-its-arena-and","title":"Eclipse ThreadX GUIX binary resource loader heap overflow","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:19.637+00:00","url":"https://junglewise.ai/threats/cve-2026-103414-the-guix-binary-resource-theme-loader-sizes-its-arena-and"},{"cve":"CVE-2026-114408","slug":"cve-2026-114408-in-eclipse-threadx-netx-duo-versions-6-4-5-202504-through-6-5-2","title":"Eclipse ThreadX NetX Duo NULL pointer dereference in ICMPv6 path MTU discovery","severity":"info","exploited":false,"published_at":"2026-11-02T16:17:27.733+00:00","url":"https://junglewise.ai/threats/cve-2026-114408-in-eclipse-threadx-netx-duo-versions-6-4-5-202504-through-6-5-2"},{"cve":"CVE-2026-94018","slug":"cve-2026-94018-the-web-add-on-s-http-server-dereferences-and-releases-an","title":"Eclipse ThreadX NetX Duo Web HTTP server use-after-free","severity":"info","exploited":false,"published_at":"2026-10-20T16:17:17.643+00:00","url":"https://junglewise.ai/threats/cve-2026-94018-the-web-add-on-s-http-server-dereferences-and-releases-an"}],"generated_at":"2026-11-10T03:07:00.198065+00:00","technologies":[{"name":"Eclipse ThreadX NetX Duo","slug":"eclipse-threadx-netx-duo","vulnerabilities":14,"url":"https://junglewise.ai/threats/technologies/eclipse-threadx-netx-duo"},{"name":"Eclipse ThreadX GUIX","slug":"guix","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/guix"},{"name":"Eclipse ThreadX NetX Secure","slug":"eclipse-threadx-netx-secure","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/eclipse-threadx-netx-secure"}]}