# Eclipse Foundation Eclipse ThreadX NetX Duo. Every CVE that names Eclipse Foundation Eclipse ThreadX NetX Duo among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full](https://agentprime.io/advisories/CVE-2026-114408.md) `CVE-2026-114408` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 8.7 High · Not analysed yet · Published 2 Nov 2026 · Tags: Memory corruption, CWE-252 - [NetX Duo Web HTTP server interprets request body content as HTTP header fields](https://agentprime.io/advisories/CVE-2026-93003.md) `CVE-2026-93003` · CVE record: Eclipse Foundation Eclipse ThreadX - NetX Duo · CVSS 6.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: HTTP request smuggling - [Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX Secure](https://agentprime.io/advisories/CVE-2026-92843.md) `CVE-2026-92843` · CVE record: Eclipse Foundation Eclipse ThreadX - NetX Duo · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption - [Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Secure](https://agentprime.io/advisories/CVE-2026-92853.md) `CVE-2026-92853` · CVE record: Eclipse Foundation Eclipse ThreadX - NetX Duo · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption - [NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path](https://agentprime.io/advisories/CVE-2026-94018.md) `CVE-2026-94018` · CVE record: Eclipse Foundation Eclipse ThreadX - NetX Duo · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption - [Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509](https://agentprime.io/advisories/CVE-2026-93475.md) `CVE-2026-93475` · CVE record: Eclipse Foundation Eclipse ThreadX - NetX Duo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption, CWE-1284 - [Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS server](https://agentprime.io/advisories/CVE-2026-106465.md) `CVE-2026-106465` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 6.9 Medium · Not analysed yet · Published 14 Oct 2026 · Tags: Authentication bypass, CWE-406 - [Out-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsing](https://agentprime.io/advisories/CVE-2026-106464.md) `CVE-2026-106464` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 8.7 High · Not analysed yet · Published 14 Oct 2026 · Tags: Memory corruption - [Out-of-bounds write in Eclipse Foundation Eclipse ThreadX - NetX Duo](https://agentprime.io/advisories/CVE-2026-103416.md) `CVE-2026-103416` · CVE record: Eclipse Foundation Eclipse ThreadX - NetX Duo · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption - [Out-of-bounds Write via NAND Metadata Parsing at Mount in LevelX](https://agentprime.io/advisories/CVE-2026-102730.md) `CVE-2026-102730` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 8.6 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-1284 - [FTP Passive Data Connection Not Bound to the Authenticated Control Peer](https://agentprime.io/advisories/CVE-2026-102727.md) `CVE-2026-102727` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 6.0 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-923 - [Out-of-bounds reads in NetX Secure client-side handshake parsing (ServerHello and HelloVerifyRequest)](https://agentprime.io/advisories/CVE-2026-102728.md) `CVE-2026-102728` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 6.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-126 - [Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read](https://agentprime.io/advisories/CVE-2026-102726.md) `CVE-2026-102726` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, Denial of service - [Out-of-bounds Read from Unvalidated MSRP Attribute List Length](https://agentprime.io/advisories/CVE-2026-102725.md) `CVE-2026-102725` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [NULL pointer dereference when evicting the last MSRP attribute in a participant's list](https://agentprime.io/advisories/CVE-2026-102724.md) `CVE-2026-102724` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [NULL Pointer Dereference on MSRP Attribute Table Exhaustion](https://agentprime.io/advisories/CVE-2026-102723.md) `CVE-2026-102723` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, Denial of service - [The FTP client trusts arbitrary IP addresses in the PASV server response](https://agentprime.io/advisories/CVE-2026-102722.md) `CVE-2026-102722` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Server-side request forgery (SSRF) - [TFTP client and server copy the ERROR packet message without bounding the read against the packet](https://agentprime.io/advisories/CVE-2026-102721.md) `CVE-2026-102721` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 6.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [DHCP client option walk drifts one byte per skipped option, reading past the received message and past the saved options buffer](https://agentprime.io/advisories/CVE-2026-102720.md) `CVE-2026-102720` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-193 - [NetX Secure DTLS server issues predictable HelloVerifyRequest cookies, so a spoofed client can pass the return-routability check](https://agentprime.io/advisories/CVE-2026-102719.md) `CVE-2026-102719` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 6.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS - [Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER length](https://agentprime.io/advisories/CVE-2026-102718.md) `CVE-2026-102718` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-130 - [A malformed Session header permanently orphans one packet-pool block per RTSP request](https://agentprime.io/advisories/CVE-2026-102716.md) `CVE-2026-102716` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 8.7 High · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service, CWE-755 - [mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packet](https://agentprime.io/advisories/CVE-2026-102715.md) `CVE-2026-102715` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, CWE-697 - [ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permane…](https://agentprime.io/advisories/CVE-2026-102714.md) `CVE-2026-102714` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 7.1 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, Denial of service, CWE-1287 - [Unbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stall](https://agentprime.io/advisories/CVE-2026-102713.md) `CVE-2026-102713` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 8.3 High · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption, Denial of service - [Out-of-bounds read in the NetX Secure DTLS ClientHello parser](https://agentprime.io/advisories/CVE-2026-102712.md) `CVE-2026-102712` · CVE record: Eclipse Foundation Eclipse ThreadX NetX Duo · CVSS 6.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Memory corruption - [Double free in Eclipse Foundation Eclipse ThreadX - NetX Duo](https://agentprime.io/advisories/CVE-2026-11576.md) `CVE-2026-11576` · CVE record: Eclipse Foundation Eclipse ThreadX - NetX Duo · CVSS 7.5 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption, CWE-459 - [Uncontrolled resource consumption in Eclipse Foundation Eclipse ThreadX - NetX Duo](https://agentprime.io/advisories/CVE-2025-55102.md) `CVE-2025-55102` · CVE record: Eclipse Foundation Eclipse ThreadX - NetX Duo · CVSS 8.7 High · Not analysed yet · Published 27 Jan 2026 · Tags: Denial of service ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .