Predictable DTLS Cookie Vulnerability in NetX Secure by Eclipse
CVE-2026-102719

6.3MEDIUM

Key Information:

Vendor

Eclipse Foundation

Status
Netxduo
Vendor
CVE Published:
29 September 2026

What is CVE-2026-102719?

A vulnerability exists in NetX Secure related to a predictable DTLS HelloVerifyRequest cookie. This flaw allows an attacker to potentially exploit predictable session tokens, compromising secure communications. Users and administrators should implement best practices to mitigate risks, including reviewing their implementation of DTLS and ensuring proper cookie management.

Affected Version(s)

netxduo 0 <= 6.5.1

References

https://github.com/eclipse-threadx/netxduo/security/advis...

CVSS V4

Score:
6.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

afldl
.