CVE-2026-102728 in NetX Duo
Tóm tắt
Bởi MITRE • 29/09/2026
Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long enough to contain them. Both are bounded out-of-bounds reads on a remotely reachable path, both are reached from a TLS or DTLS client connecting to a malicious or malformed server, and both have the same shape: the bounds check exists and returns the correct status, but it runs after the read it is meant to guard.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.