MQTT WebSocket Setter ABI Mismatch in Eclipse ThreadX NetX Duo
CVE-2026-102717

7.5HIGH

Key Information:

Vendor: Eclipse Foundation
Status: Netx Duo
Vendor: CVE Published:; 30 September 2026

🔔 Create Eclipse Foundation Vulnerability Alert

What is CVE-2026-102717?

The vulnerability in the MQTT WebSocket setter within Eclipse ThreadX NetX Duo can lead to a mismatch in the Application Binary Interface (ABI). This mismatch may potentially disclose sensitive memory data or cause unexpected crashes, affecting the stability and security of applications utilizing this protocol.

Affected Version(s)

NetX Duo 6.4.4 <= 6.5.1.202602

NetX Duo 6.5.2.202603

References

https://github.com/eclipse-threadx/netxduo/security/advis...

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 30, 2026
Vulnerability Reserved
Sep 29, 2026

Credit

fdesbiens

CVE-2026-102717 Data

JSON