CVE-2026-102724

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-09-29

Last updated on: 2026-11-04

Assigner: Eclipse Foundation

Description

In Eclipse ThreadX NetX Duo versions 6.4.0 through 6.5.2.202603a, built with VLAN and SRP support, evicting the last attribute in an MRP participant's list writes through a null successor pointer. An unauthenticated station on the same Layer 2 segment can fault the MRP worker thread by declaring one MSRP attribute and withdrawing it, and ordinary withdrawals by legitimate stations reach the same path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-11-04

Generated

2026-11-08

AI Q&A

2026-09-29

EPSS Evaluated

2026-11-07

NVD

CVE-2026-102724

EUVD

EUVD-2026-89190

Affected Vendors & Products

Vendor	Product	Version / Range
Eclipse Foundation	NetX Duo	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability involves a NULL pointer dereference when evicting the sole MSRP attribute. A NULL pointer dereference occurs when a program attempts to access memory at a NULL address, which can lead to crashes or unexpected behavior.

Detection Guidance

Detection methods for this NULL pointer dereference vulnerability are not specified in the provided CVE data. General approaches include monitoring for crashes or unusual behavior in applications handling MSRP attributes, checking logs for segmentation faults, and using debugging tools like gdb or valgrind to identify NULL pointer dereferences.

Impact Analysis

This vulnerability can cause system crashes or instability when the affected software tries to evict the sole MSRP attribute. It may lead to denial-of-service conditions or unexpected termination of the application.

Compliance Impact

The vulnerability is a NULL pointer dereference issue in MSRP attribute eviction, which could lead to denial of service or unexpected behavior. However, the provided CVE data does not specify direct impacts on compliance standards like GDPR or HIPAA.

Mitigation Strategies

Apply patches or updates from the vendor if available. Monitor Eclipse Foundation advisories for fixes. Restrict network access to affected systems if possible. Review logs for unusual activity related to MSRP attribute handling.

Hi! I’m here to help you understand CVE-2026-102724. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...