Threats tagged 'ghsa-m9v4-gw5f-8cg7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.0	EPSS 0.2%	CVE-2026-102727Eclipse ThreadX NetX Duo · Improper Restriction of Communication Channel to Intended Endpoints Medium6.0EPSS 0.2%2026-09-29CVE Database V5CVE-2026-102727 Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a contain a vulnerability in the FTP server's passive mode implementation. The server accepts the first connection to a passive data port without verifying that it originates from the client that requested passive mode. This allows an unauthenticated attacker to intercept or inject data during file transfers. EPSS 0.2%Vulnerability Eclipse Foundation CWE-923 #ghsa-m9v4-gw5f-8cg7	CVE Database V5	2026-09-29

Page 1 of 1