CVE-2026-115654

UNKNOWN 0.0

User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a user-mode, memory-protected module belongs to that module. Any loaded module can suspend, resume, terminate, reset or re-prioritise application threads and other modules' threads and abort their waits, denying service or changing how the system schedules them.

CWE	CWE-284 CWE-862
Vendor	eclipse foundation
Product	eclipse threadx
Published	Nov 2, 2026
Last Updated	Nov 2, 2026

Stay Ahead of the Next One

Get instant alerts for eclipse foundation eclipse threadx

Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse threadx are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Eclipse Foundation / Eclipse ThreadX

6.0.1 ≤ 6.5.2.202603

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-5q6x-rxf3-5q5f gitlab.eclipse.org: https://gitlab.eclipse.org/security/cve-assignment/-/work_items/502

Credits

Frédéric Desbiens