CVE-2026-102726

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-09-29

Last updated on: 2026-11-04

Assigner: Eclipse Foundation

Description

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the PPP IPCP code parses a peer's Configure-Nak without validating each option's length. A malicious PPP peer can stall the PPP thread indefinitely with a zero-length option, taking the link down, and can read back up to four bytes of packet-buffer memory per exchange with a short address option.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-11-04

Generated

2026-11-08

AI Q&A

2026-09-29

EPSS Evaluated

2026-11-07

NVD

CVE-2026-102726

EUVD

EUVD-2026-89193

Affected Vendors & Products

Vendor	Product	Version / Range
Eclipse Foundation	NetX Duo	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-835	The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves unbounded parsing of PPP IPCP options, which can cause a worker process to stall and lead to an out-of-bounds read. This occurs when the system processes IPCP options without proper bounds checking, potentially allowing memory corruption or denial of service.

Impact Analysis

The impact includes potential denial of service due to worker stalls, and possible memory corruption from out-of-bounds reads. An attacker in adjacent network positions could exploit this to disrupt services or access sensitive data.

Compliance Impact

The vulnerability involves unbounded PPP IPCP option parsing leading to a worker stall and out-of-bounds read. This could potentially disrupt system availability or integrity, which may impact compliance with standards requiring data availability and integrity, such as GDPR or HIPAA.

Mitigation Strategies

Update Unbound to the latest patched version to address the unbounded PPP IPCP option parsing issue. Monitor vendor advisories for patches and apply them promptly.

Hi! I’m here to help you understand CVE-2026-102726. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...