Out-of-bounds write in NetX Duo - CVE-2026-93475
Published: November 9, 2026
Vulnerability identifier: #VU162959
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-93475
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to corrupt memory during peer certificate verification.
The vulnerability exists due to missing RSA modulus size validation in NetX Duo's NetX Secure X.509 processing when certificate-chain verification writes into fixed-size buffers. An unauthenticated remote attacker can present a chain containing an oversized intermediate RSA key to a TLS or DTLS client, or a server with client-certificate authentication enabled, causing an out-of-bounds write before authentication.
Affected software
NetX Duo
How to mitigate CVE-2026-93475
Install security update from vendor's website.
NetX Duo - update to 6.5.2.202603