All vulnerabilities
CVE-2026-94018GHSA-wjxf-gjm5-jh5q

NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path

Eclipse Foundation Eclipse ThreadX - NetX Duo
Open in ThreatlineRecord JSON
CVSS
8.8High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.40%Chance of exploitation activity in the next 30 days, higher than 32% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published20 Oct 2026Updated 20 Oct 2026CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Description

The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a Content-Length underflow while processing a PUT request. The condition is reachable by an unauthenticated remote client with a single malformed request.

Text from CVE List

Affected versions 2

  • Eclipse ThreadX - NetX Duoaffected: 6.4.2 through 6.5.1.202602CVE List
  • Eclipse ThreadX - NetX Duounaffected: 6.5.2.202603CVE List

References 1