CVE-2026-115654

Name of the Vulnerable Software and Affected Versions Eclipse ThreadX versions 6.0.1 through 6.5.2.202603

Description The Module Manager's thread-control services fail to verify if a thread provided by a user-mode, memory-protected module actually belongs to that module. This allows any loaded module to perform unauthorized actions on application threads or threads from other modules, including suspending, resuming, terminating, resetting, or re-prioritizing them, as well as aborting their waits. Such actions can lead to a denial of service or unauthorized changes to system scheduling.

Recommendations Update Eclipse ThreadX to a version later than 6.5.2.202603.