Search/CVE-2026-102762
● CVE

CVE-2026-102762

DiscoveredSep 29, 2026UpdatedSep 30, 2026

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such messages exhausts the pool and stops all inbound network traffic on the device until it is rebooted.

CVSS v3.1
—
EPSS
0.21%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
1 relationships
Timeline
disclosure → media coverage
Sep 29, 2026
Disclosure — published as a CVE record.