CVE-2026-93003
CVE-2026-93003 · NetX Duo Web HTTP server interprets request body content as HTTP header fields
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
The Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of the header section. A header field name placed in the request body is therefore reported to the server as though it were a header, which lets a client control request framing decisions it should not be able to reach.
CVSS 6.9 · Media · EPSS 0,3% · Corrección disponible
- Publicación
- Actualización
Productos y versiones afectados
eclipse threadx - netx duo
- Versiones
- ≥ 0, ≤ 6.5.1.202602: Afectada (semver)
- 6.5.2.202603: No afectada
Actualiza a 6.5.2.202603