CVE-2026-102762

Name of the Vulnerable Software and Affected Versions NetX Duo (affected versions not specified)

Description The MQTT client fails to release the packet containing a malformed PUBLISH message. This results in a memory leak where each malformed message consumes a packet or a chain of packets from the network driver's receive pool without returning it. An attacker can exhaust the receive pool by sending a small number of these messages, which halts all inbound network traffic on the device until a reboot is performed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.