CVE-2026-102760

When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet chain and may already have released it to the packet pool. The wipe therefore writes zeros into packets that are free or in use by another thread, and when a reused packet's pointers no longer describe the old data, the length of the wipe underflows and it runs past the end of the packet pool.

• CWE-416

• https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-8w5x-ff58-2fr2

Published

Sep 29, 2026

Last Modified

Sep 29, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10274A vulnerability was determined in indrasishbanerjee aem-mcp-…6.3
• CVE-2026-10275A flaw has been found in OpenSC up to 0.26.1. This affects t…5
• CVE-2026-102757An unprivileged, memory-protected ThreadX module can have th…8.5
• CVE-2026-102758The `_nx_secure_x509_asn1_tlv_block_parse()` function parses…
• CVE-2026-102759NetX Secure TLS accepts an empty application-data record wit…6.3
• CVE-2026-10276A vulnerability has been found in hekmon8 Jenkins-server-mcp…6.3
• CVE-2026-102761NetX Duo's WebSocket client resets the unmasking cursor to t…9.3
• CVE-2026-102762The NetX Duo MQTT client leaks the packet carrying a malform…8.2
• CVE-2026-10277A vulnerability was found in j3k0 mcp-google-workspace up to…6.3
• CVE-2026-102771A security vulnerability has been detected in Naichen ThinkC…4.7
• CVE-2026-10278A vulnerability was determined in ishayoyo excel-mcp up to 1…6.3
• CVE-2026-10279A vulnerability was identified in hiraishikentaro wezterm-mc…6.3