CVE-2026-102725GHSA-m9hv-hvwf-5qh7
NetX Duo: Out-of-bounds Read from Unvalidated MSRP Attribute List Length
Eclipse Foundation NetX Duo
CVSS
6.0MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
Out-of-bounds Read from Unvalidated MSRP Attribute List Length
Text from CVE List
Affected versions 1
- NetX Duoaffected: all versions through 6.5.1.202602CVE List