Thread Control Vulnerability in Eclipse ThreadX by Eclipse Foundation

CVE-2026-115654

What is CVE-2026-115654?

In specific versions of Eclipse ThreadX, insufficient checks performed by the Module Manager's thread-control services allow unauthorized modules to manipulate threads. This vulnerability enables any loaded module to impact the operation of both application threads and other modules' threads, potentially leading to denial of service. By exploiting this flaw, malicious actors can suspend, resume, terminate, reset, or alter the priority of threads, disrupting applications and compromising the integrity of the system.

References