CVE-2026-106464

CVSS 8.7 (high) · published 2026-10-14

In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the NetX Secure X.509 parser accepts a certificate whose signature is an empty BIT STRING and records a signature length of 0xFFFFFFFF. A remote peer can present such a certificate during the TLS handshake, before authentication, and make the device read far outside the certificate buffer during signature verification, which is expected to fault.

Weakness: CWE-125, CWE-191

Source: NVD CVE-2026-106464

References

• https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-ww3q-3444-q488
• https://gitlab.eclipse.org/security/cve-assignment/-/work_items/368

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.