Improper Request Handling in Eclipse ThreadX NetX Duo Web Add-on

CVE-2026-93003

What is CVE-2026-93003?

The Web add-on for Eclipse ThreadX NetX Duo has a vulnerability related to its HTTP server's method of handling request packets. Instead of terminating the search for header fields at the end of the header section, it continues to look through the entire request packet. This flaw allows an attacker to manipulate a header field name located in the request body, enabling them to influence request framing decisions that they should not normally control, potentially leading to further exploitation vulnerabilities.

References