ThreadX vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

TH

Product

ThreadX

by Eclipse Foundation · last CVE Sep 29, 2026

11

CVEs

0

On KEV

8.5

Max CVSS

2

New 30D

Vulnerabilities11 In the news0 Timeline

Severity mix

Critical 0High 9Medium 2Low 0

Severity

All severities11 Critical0 High9 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add ThreadX to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-102757	8.5	0%	Sep 29	An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the MPU… Affected: 6.0.1 through 6.5.1.202602a
CVE-2026-102709	8.4	0%	Sep 29	Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the non-secure world to supply… Affected: through 6.5.1.202602
CVE-2025-2259	7.5	1%	Apr 6	Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflow Affected: before 6.4.2
CVE-2025-2260	7.5	1%	Apr 6	Eclipse ThreadX NetX Duo HTTP component server denial of service Affected: before 6.4.2
CVE-2025-2258	7.5	1%	Apr 6	Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow Affected: before 6.4.2
CVE-2025-0727	7.5	1%	Feb 21	Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow Affected: before 6.4.1
CVE-2025-0728	7.5	1%	Feb 21	Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflow Affected: before 6.4.1
CVE-2025-0726	7.5	1%	Feb 21	Eclipse ThreadX NetX Duo HTTP server denial of service Affected: before 6.4.1
CVE-2025-55080	7.1	0%	Oct 15	Improper Parameter Check in ThreadX Syscall Implementation Affected: before 6.4.3