Forged Callback Request Vulnerability in Eclipse ThreadX Module Manager

CVE-2026-115231

What is CVE-2026-115231?

In specific versions of Eclipse ThreadX, the Module Manager is susceptible to a vulnerability where a user-mode memory-protected module can issue a malicious callback request to another module's callback queue. This flaw allows an unauthorized user-mode module to invoke code with the privileges of the recipient module when that module is executed in a privileged context. By exploiting this vulnerability, an attacker can potentially gain elevated permissions, leading to serious security implications.

References