{"id":"CVE-2026-102728","title":"Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them","summary":"Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, bo…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-126"],"vendor":"Eclipse Foundation","product":"NetX Duo","affected":["netx_duo <= 6.5.1.202602"],"published":"2026-09-29","updated":"2026-09-30","sourceUpdated":"2026-09-30T20:17:23.380","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-102728","references":[{"url":"https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-4q67-8385-j6m5","label":"emo@eclipse.org"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-30T19:35:49.634457Z"},"epss":0.00245,"epssPercentile":0.15643,"ingestedAt":"2026-09-29T18:42:35.818Z","slug":"CVE-2026-102728","body":"## Overview\n\nTwo client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a malicious or malformed server, and both have the same shape: the bounds check exists and returns the correct status, but it runs after the read it is meant to guard.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":213918,"id":"CVE-2026-102728","ts":1790799885992,"field":"cvss","old":null,"new":"7.5"},{"seq":213917,"id":"CVE-2026-102728","ts":1790799885992,"field":"severity","old":"none","new":"high"}]}