CVE-2026-102727: Eclipse Foundation Netx Duo

Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days.

FTP Passive Data Connection Not Bound to the Authenticated Control Peer

Affected products

• Eclipse Foundation Netx Duo: up to and including 6.5.1.202602

Published 2026-09-29. Last modified 2026-09-29.