CVE-2026-102717

Summary

MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash

Affected Software

VendorProductVersion RangeStatus
Eclipse FoundationNetX Duo6.4.4 <= 6.5.1.202602affected
Eclipse FoundationNetX Duo6.5.2.202603unaffected

Weaknesses

  • CWE-125: CWE-125 Out-of-bounds Read
  • CWE-457: CWE-457 Use of Uninitialized Variable

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References