NULL pointer dereference in NetX Duo - CVE-2026-115403
Published: November 9, 2026
Vulnerability identifier: #VU162967
CSH Severity: Medium
CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-115403
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to crash a NetX Duo application.
The vulnerability exists due to an unchecked destination-table insertion failure causing a NULL pointer dereference in BSD raw IPv6 sending when the default router is unresolved. An unauthenticated remote attacker can fill the table using ICMPv6 Packet Too Big messages when IPv6 path MTU discovery is enabled, triggering a crash when the application sends to a new off-link destination through an IPv6 raw socket with IP_RAW_IPV6_HDRINCL enabled.
Affected software
NetX Duo
How to mitigate CVE-2026-115403
Install security update from vendor's website.
NetX Duo - update to 6.5.2.202603