agentprime: eclipse-foundation-eclipse-threadx-netx-duoEvery new CVE for eclipse-foundation-eclipse-threadx-netx-duo.https://agentprime.io/CVE-2026-114408: NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is fullhttps://agentprime.io/advisories/CVE-2026-114408/https://agentprime.io/advisories/CVE-2026-114408/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 15:04:39 GMTCVECVE-2026-93003: NetX Duo Web HTTP server interprets request body content as HTTP header fieldshttps://agentprime.io/advisories/CVE-2026-93003/https://agentprime.io/advisories/CVE-2026-93003/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:24:53 GMTCVECVE-2026-92843: Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX Securehttps://agentprime.io/advisories/CVE-2026-92843/https://agentprime.io/advisories/CVE-2026-92843/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:12:55 GMTCVECVE-2026-92853: Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Securehttps://agentprime.io/advisories/CVE-2026-92853/https://agentprime.io/advisories/CVE-2026-92853/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:10:08 GMTCVECVE-2026-94018: NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow pathhttps://agentprime.io/advisories/CVE-2026-94018/https://agentprime.io/advisories/CVE-2026-94018/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:10:08 GMTCVECVE-2026-93475: Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509https://agentprime.io/advisories/CVE-2026-93475/https://agentprime.io/advisories/CVE-2026-93475/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Oct 2026 15:04:30 GMTCVEcriticalCVE-2026-106465: Missing HelloVerifyRequest cookie validation in the NetX Secure DTLS serverhttps://agentprime.io/advisories/CVE-2026-106465/https://agentprime.io/advisories/CVE-2026-106465/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 17:47:11 GMTCVECVE-2026-106464: Out-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsinghttps://agentprime.io/advisories/CVE-2026-106464/https://agentprime.io/advisories/CVE-2026-106464/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 17:41:43 GMTCVECVE-2026-103416: Out-of-bounds write in Eclipse Foundation Eclipse ThreadX - NetX Duohttps://agentprime.io/advisories/CVE-2026-103416/https://agentprime.io/advisories/CVE-2026-103416/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 08:55:12 GMTCVEcriticalCVE-2026-102730: Out-of-bounds Write via NAND Metadata Parsing at Mount in LevelXhttps://agentprime.io/advisories/CVE-2026-102730/https://agentprime.io/advisories/CVE-2026-102730/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:59:30 GMTCVECVE-2026-102727: FTP Passive Data Connection Not Bound to the Authenticated Control Peerhttps://agentprime.io/advisories/CVE-2026-102727/https://agentprime.io/advisories/CVE-2026-102727/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:57:37 GMTCVECVE-2026-102728: Out-of-bounds reads in NetX Secure client-side handshake parsing (ServerHello and HelloVerifyRequest)https://agentprime.io/advisories/CVE-2026-102728/https://agentprime.io/advisories/CVE-2026-102728/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:55:18 GMTCVECVE-2026-102726: Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Readhttps://agentprime.io/advisories/CVE-2026-102726/https://agentprime.io/advisories/CVE-2026-102726/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:51:48 GMTCVECVE-2026-102725: Out-of-bounds Read from Unvalidated MSRP Attribute List Lengthhttps://agentprime.io/advisories/CVE-2026-102725/https://agentprime.io/advisories/CVE-2026-102725/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:51:03 GMTCVECVE-2026-102724: NULL pointer dereference when evicting the last MSRP attribute in a participant's listhttps://agentprime.io/advisories/CVE-2026-102724/https://agentprime.io/advisories/CVE-2026-102724/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:49:52 GMTCVECVE-2026-102723: NULL Pointer Dereference on MSRP Attribute Table Exhaustionhttps://agentprime.io/advisories/CVE-2026-102723/https://agentprime.io/advisories/CVE-2026-102723/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:48:42 GMTCVECVE-2026-102722: The FTP client trusts arbitrary IP addresses in the PASV server responsehttps://agentprime.io/advisories/CVE-2026-102722/https://agentprime.io/advisories/CVE-2026-102722/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:47:56 GMTCVECVE-2026-102721: TFTP client and server copy the ERROR packet message without bounding the read against the packethttps://agentprime.io/advisories/CVE-2026-102721/https://agentprime.io/advisories/CVE-2026-102721/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:47:12 GMTCVECVE-2026-102720: DHCP client option walk drifts one byte per skipped option, reading past the received message and past the saved options bufferhttps://agentprime.io/advisories/CVE-2026-102720/https://agentprime.io/advisories/CVE-2026-102720/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:46:23 GMTCVECVE-2026-102719: NetX Secure DTLS server issues predictable HelloVerifyRequest cookies, so a spoofed client can pass the return-routability checkhttps://agentprime.io/advisories/CVE-2026-102719/https://agentprime.io/advisories/CVE-2026-102719/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:45:21 GMTCVECVE-2026-102718: Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER lengthhttps://agentprime.io/advisories/CVE-2026-102718/https://agentprime.io/advisories/CVE-2026-102718/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:44:43 GMTCVECVE-2026-102716: A malformed Session header permanently orphans one packet-pool block per RTSP requesthttps://agentprime.io/advisories/CVE-2026-102716/https://agentprime.io/advisories/CVE-2026-102716/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:43:55 GMTCVECVE-2026-102715: mDNS string-cache lookup matches on slot size, so a peer name aliases a shorter one and the response encoder writes past the packethttps://agentprime.io/advisories/CVE-2026-102715/https://agentprime.io/advisories/CVE-2026-102715/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:42:35 GMTCVECVE-2026-102714: ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement and Redirect option walkers past the packet or into a permane…https://agentprime.io/advisories/CVE-2026-102714/https://agentprime.io/advisories/CVE-2026-102714/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:41:28 GMTCVECVE-2026-102713: Unbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stallhttps://agentprime.io/advisories/CVE-2026-102713/https://agentprime.io/advisories/CVE-2026-102713/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:40:40 GMTCVECVE-2026-102712: Out-of-bounds read in the NetX Secure DTLS ClientHello parserhttps://agentprime.io/advisories/CVE-2026-102712/https://agentprime.io/advisories/CVE-2026-102712/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 17:39:31 GMTCVECVE-2026-11576: Double free in Eclipse Foundation Eclipse ThreadX - NetX Duohttps://agentprime.io/advisories/CVE-2026-11576/https://agentprime.io/advisories/CVE-2026-11576/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 08:27:59 GMTCVECVE-2025-55102: Uncontrolled resource consumption in Eclipse Foundation Eclipse ThreadX - NetX Duohttps://agentprime.io/advisories/CVE-2025-55102/https://agentprime.io/advisories/CVE-2025-55102/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 15:25:36 GMTCVE