Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-103415

Quick assessment

Affected
Eclipse Foundation NetX Duo
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

当 TLS 1.3 客户端处理 HelloRetryRequest 时，会将服务器的 Cookie 复制到自己的第二个 ClientHello 消息中，但未检查该 Cookie 是否能容纳在待发送的 packet 中。由于该 Cookie 的长度和内容均来自对端，且在完成证书认证之前便进行写入操作，因此恶意或已被攻陷的服务器可以在不提供证书的情况下，覆盖客户端 TLS 数据包缓冲区之外的内存区域。 仅客户端路径受影响。

CVSS 9.3 · Critical EPSS 0.28% · P20

Affected Version Matrix 2

VendorProduct Version RangeStatus
Eclipse Foundation NetX Duo ≤ 6.5.1.202602 affected
6.5.2.202603 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-103415

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the contents of that cookie come from the peer, and the write happens before certificate authentication completes, so a malicious or compromised server can overwrite memory past the caller supplied TLS packet buffer without presenting a certificate. Only the client path is affected.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Eclipse Foundation NetX Duo 0 ~ 6.5.1.202602 -

II. Public POCs for CVE-2026-103415

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-103415

请登录查看更多情报信息。

Other References for CVE-2026-103415 (2)

Same Patch Batch · Eclipse Foundation · 2026-10-14 · 8 CVEs total

CVE-2026-102476 9.1 CRITICAL Eclipse Vert.x SSL缓存绕过漏洞
CVE-2026-106464 8.7 HIGH VxWorks 库TLS空签名解析致越界
CVE-2026-106465 8.7 HIGH NetX Secure DTLS服务器存在绕过验证漏洞
CVE-2026-102479 8.7 HIGH Vert.x 5.0-5.2 HTTP请求走私漏洞
CVE-2026-102460 8.6 HIGH CVE-2026-102460
CVE-2026-103414 8.4 HIGH GUIX二进制资源加载器缓冲区溢出漏洞
CVE-2026-102471 6.9 MEDIUM CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages

IV. Related Vulnerabilities

Same product: NetX Duo
Same vendor: Eclipse Foundation
Same weakness: CWE-787

V. Comments for CVE-2026-103415

No comments yet

Leave a comment