{"affected":[{"defaultStatus":"unaffected","product":"Eclipse ThreadX NetX Duo","source":"CNA: eclipse","vendor":"Eclipse Foundation","versions":[{"lessThanOrEqual":"6.5.2.202603","status":"affected","version":"0","versionType":"custom"},{"status":"unaffected","version":"6.5.2.202603a","versionType":"custom"}]}],"cveId":"CVE-2026-102716","cwes":["CWE-401","CWE-755"],"description":"In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the RTSP server returns a raw parser error for a malformed Session header and never releases the response packet it allocated. An unauthenticated client can drain the server's packet pool with a few dozen requests, stopping the RTSP server and, where the pool is shared, the rest of the network stack until the device restarts.","epss":{"date":"2026-11-03","percentile":0.16834,"score":0.00253},"exploits":[],"kev":null,"metrics":[{"score":8.7,"severity":"high","source":"CNA: eclipse","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793798137718,"publishedAt":1790703835870,"references":[{"source":"CNA: eclipse","tags":[],"url":"https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-q462-246c-x3jc"}],"remediation":[],"revision":"84ff18b035d265254340aec561a22eb4a8ab2f1983f8d409eae76118f299f5ec","sources":[{"modifiedAt":1793798137718,"name":"CNA: eclipse","retrievedAt":1793801317855,"url":"https://www.cve.org/CVERecord?id=CVE-2026-102716"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793801407584,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-102716"}],"ssvc":{"assessedAt":1790707253878,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"A malformed Session header permanently orphans one packet-pool block per RTSP request","updatedAt":1793801407584}