FTP Passive Data Connection Flaw in Eclipse ThreadX NetX Duo
CVE-2026-102727

6MEDIUM

Key Information:

Vendor: Eclipse Foundation
Status: Netx Duo
Vendor: CVE Published:; 29 September 2026

🔔 Create Eclipse Foundation Vulnerability Alert

What is CVE-2026-102727?

A security flaw in Eclipse ThreadX NetX Duo allows FTP passive data connections to remain unbound to the authenticated control peer. This could enable unauthorized data access, as the lack of proper binding permits connections from the control peer to improperly route FTP data packets, potentially exposing sensitive data to malicious actors.

Affected Version(s)

NetX Duo 0 <= 6.5.1.202602

References

https://github.com/eclipse-threadx/netxduo/security/advis...

CVSS V4

Score:

Severity:

MEDIUM

Confidentiality:

High

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

High

Attack Required:

Physical

Privileges Required:

Undefined

User Interaction:

Unknown

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 29, 2026
Vulnerability Reserved
Sep 29, 2026

Credit

wsparks-vc

CVE-2026-102727 Data

JSON