TLS 1.3 Certificate-message Parser Vulnerability in NetX Secure by Eclipse

CVE-2026-92853

What is CVE-2026-92853?

A vulnerability exists in the TLS 1.3 Certificate-message parser of NetX Secure, where the message length is incorrectly decremented to skip a context byte without confirming the message contains a byte to skip. This flaw enables a zero-length Certificate message to inadvertently wrap the unsigned length to 0xFFFFFFFF, leading to a bypass of subsequent bounds checks. As a result, the parser can read beyond the session packet buffer, exposing the system to potential exploitation. The vulnerability can be triggered using a basic four-byte handshake header, allowing attackers to exploit it without needing cryptographic validity, making it reachable even before authentication.

References