Eclipse Foundation Threadx vulnerabilities

2 CVEs affecting Eclipse Foundation Threadx, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-102757, published 2026-09-29.

More from Eclipse Foundation.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-102757, published 2026-09-29. High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days. An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the MPU enable bit and remove…
• CVE-2026-102709, published 2026-09-29. High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days. Improper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the non-secure world to supply pointers to secure…