CVE-2026-92843
Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX Secure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger an unsigned-integer underflow and a subsequent heap out-of-bounds read in any peer that processes a remote Certificate message. It is reachable pre-authentication, during the normal handshake, before certificate verification completes.
| CWE | CWE-125 |
| Vendor | eclipse foundation |
| Product | eclipse threadx - netx duo |
| Published | Oct 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for eclipse foundation eclipse threadx - netx duo
Be the first to know when new unknown vulnerabilities affecting eclipse foundation eclipse threadx - netx duo are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Eclipse Foundation / Eclipse ThreadX - NetX Duo
0 ≤ 6.5.1.202602
References
Credits
🔍 afldl