Threats Tagged 'ghsa-q2vr-5v2w-fjr2'

CVE-2026-102759 is a medium severity vulnerability in Eclipse Foundation's NetX Duo where the NetX Secure TLS component improperly validates the integrity check value. Specifically, it accepts an empty TLS application-data record without verifying its message authentication code (MAC), treating such records as valid and advancing the receive sequence number without MAC comparison. Empty TLS application-data records are legal and commonly used in TLS 1.0 as a mitigation against the BEAST attack.