PT-2026-102770

Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description An issue exists in the nx secure x509 asn1 tlv block parse function, which is used to parse ASN.1 TLV tag-length-value blocks from DER-encoded data during X.509 certificate parsing in TLS...

PT-2026-102771

Name of the Vulnerable Software and Affected Versions NetX Secure TLS affected versions not specified Description NetX Secure TLS accepts empty application-data records without verifying the message authentication code MAC. Within the nx secure verify mac function, a decrypted application record...

PT-2026-102772

Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description When built with NX SECURE KEY CLEAR, the software wipes every TLS record sent on an active session after it is handed to TCP. Because the TCP layer may have already released the packet...

PT-2025-42315

Name of the Vulnerable Software and Affected Versions Eclipse Foundation NextX Duo versions prior to 6.4.4 Description The nx secure tls process clienthello function lacked proper length verification for the ciphersuite length and compression method length within SSL/TLS client hello messages. An...

PT-2025-42316

Name of the Vulnerable Software and Affected Versions NetX Duo versions prior to 6.4.4 Description An out-of-bounds read issue exists in the Eclipse Foundation ThreadX component of NetX Duo, specifically within the nx secure tls process clienthello function. This is due to a missing validation of...