CVE-2026-11576

Name of the Vulnerable Software and Affected Versions eclipse-threadx NetX Duo (affected versions not specified)

Description An issue exists in the HTTP server PUT process where error handling refactoring introduces a shared cleanup path. This path unconditionally calls the fx file close() function, even if the file was not successfully opened. When error branches jump to this cleanup label before a file open operation occurs, the fx file close() function operates on an uninitialized file handle, which can result in memory corruption, double-close issues, or undefined behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.