Error Handling Vulnerability in NetX Duo HTTP Server by Eclipse

CVE-2026-11576

What is CVE-2026-11576?

The vulnerability arises from a flaw in the error handling mechanism of the HTTP server's PUT process in the NetX Duo framework. A shared cleanup label has been introduced for managing resources, but it inadvertently invokes the file close operation without checking if the file handle was successfully initialized. This situation can lead to undefined behavior, including potential memory corruption and double-close scenarios, thus compromising the integrity of the system.

References