CVE-2026-115231

CVSS 8.5 (high) · published 2026-11-03

In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module post a forged callback request to another module's callback request queue. The receiving module's callback thread calls the function pointer in the request without checking that the Module Manager sent it, so the attacker's code runs with the receiving module's privilege; when that module runs in privileged mode, a user-mode module gains privileged execution.

Weakness: CWE-269, CWE-862

Source: NVD CVE-2026-115231

References

• https://github.com/eclipse-threadx/threadx/security/advisories/GHSA-q2rc-f35r-2hw6
• https://gitlab.eclipse.org/security/cve-assignment/-/work_items/484

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.