CVE-2026-102728

Awaiting Analysis Awaiting Analysis - Queue

NetX Secure TLS/DTLS Handshake Parser Out-of-Bounds Read

Publication date: 2026-09-29

Last updated on: 2026-09-30

Assigner: Eclipse Foundation

Description

Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a malicious or malformed server, and both have the same shape: the bounds check exists and returns the correct status, but it runs after the read it is meant to guard.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-30

Generated

2026-10-19

AI Q&A

2026-09-29

EPSS Evaluated

2026-10-18

NVD

CVE-2026-102728

EUVD

EUVD-2026-89195

Affected Vendors & Products

Vendor	Product	Version / Range
eclipse	netx_secure	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-126	The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

Attack-Flow Graph

Executive Summary

This vulnerability involves two client-side TLS/DTLS handshake parsers in NetX Secure that read fields from a server message before validating if the message is long enough. This leads to bounded out-of-bounds reads, which can be exploited remotely by a malicious or malformed server targeting a TLS or DTLS client.

Detection Guidance

This vulnerability involves client-side TLS/DTLS handshake parsers in NetX Secure reading fields before validating message length. Detection requires inspecting network traffic for malformed TLS/DTLS handshake messages or monitoring systems running NetX Secure for unexpected behavior during client-server connections.

Impact Analysis

This vulnerability could allow an attacker to read sensitive memory contents on your system by sending a specially crafted server message during a TLS/DTLS handshake. This may lead to information disclosure or potential further exploitation depending on the system configuration.

Compliance Impact

The vulnerability involves out-of-bounds reads in TLS/DTLS handshake parsers, which could lead to information disclosure or crashes. This may impact compliance with GDPR by potentially exposing sensitive data during transmission, and with HIPAA by risking unauthorized access to protected health information during client-server communication.

Mitigation Strategies

Update NetX Secure to the latest patched version to address the out-of-bounds read issues in TLS/DTLS handshake parsers. Monitor vendor advisories for patches and apply them promptly.

Hi! I’m here to help you understand CVE-2026-102728. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70