CVE-2026-102719

Awaiting Analysis Awaiting Analysis - Queue

Predictable DTLS HelloVerifyRequest Cookie in NetX Secure

Publication date: 2026-09-29

Last updated on: 2026-11-04

Assigner: Eclipse Foundation

Description

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the NetX Secure DTLS server fills HelloVerifyRequest cookies from NX_RAND(), by default the C library rand(), with no key and no binding to the client. An attacker who can predict the generator's output can pass the cookie exchange from a spoofed address and make the server send its handshake flight to a victim, using it as a traffic reflector.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-11-04

Generated

2026-11-08

AI Q&A

2026-09-29

EPSS Evaluated

2026-11-07

NVD

CVE-2026-102719

EUVD

EUVD-2026-89182

Affected Vendors & Products

Vendor	Product	Version / Range
eclipse	netx_secure	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-338	The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.
CWE-330	The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

Attack-Flow Graph

Executive Summary

This vulnerability involves a predictable DTLS HelloVerifyRequest cookie in NetX Secure. DTLS is a protocol for securing datagram-based applications. The issue allows attackers to predict or manipulate the cookie used in the handshake process, potentially enabling session hijacking or man-in-the-middle attacks.

Detection Guidance

Detection of this vulnerability requires analyzing network traffic for predictable DTLS HelloVerifyRequest cookies in NetX Secure. Use packet capture tools like Wireshark or tcpdump to inspect DTLS handshake packets for cookie generation patterns. Look for cookies that are not sufficiently randomized or follow a predictable sequence.

Impact Analysis

An attacker could exploit this to intercept or alter communications between systems using NetX Secure. This may lead to unauthorized access, data breaches, or disruption of services. Systems relying on DTLS for secure communication are particularly at risk.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR, HIPAA, or other regulations requiring secure data transmission. Failure to protect data in transit may result in legal penalties, loss of trust, and reputational damage due to potential data exposure.

Mitigation Strategies

Update NetX Secure to the latest patched version to address the predictable DTLS HelloVerifyRequest Cookie issue. Monitor vendor advisories for specific fixes and apply them promptly.

Hi! I’m here to help you understand CVE-2026-102719. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...