#netxduo
CVE-2026-103415 - netx duo
The NetX Duo client may copy a server-provided cookie into a follow‑up TLS handshake message without checking its size. A malicious server can send an oversized cookie,…

Too many irrelevant or confusing CVEs? Use stackflag.com

#netxduo #eclipsefoundation #CVE #infosec
CVE-2026-103415: NetX Duo client can be crashed by crafted TLS cookie
The NetX Duo client may copy a server-provided cookie into a follow‑up TLS handshake message without checking its size.
stackflag.com
October 15, 2026 at 4:30 AM
CVE-2025-55086 - NetXDuo ThreadX DHCPV6 DUID Out-of-Bounds Read
CVE ID : CVE-2025-55086

Published : Oct. 20, 2025, 6:15 p.m. | 26 minutes ago

Description : In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client t...
CVE-2025-55086 - NetXDuo ThreadX DHCPV6 DUID Out-of-Bounds Read
In NetXDuo version before 6.4.4, a networking support module for Eclipse Foundation ThreadX, in the DHCPV6 client there was an unchecked index extracting the server DUID from the server reply. With a crafted packet, an attacker could cause an out of memory read.
cvefeed.io
October 20, 2025 at 7:05 PM