CVE-2026-115654
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
39/100
Published: 2026-11-02
Modified: 2026-11-02
First seen: 2026-11-02
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
X
AT:
None
VC:
None
VI:
Low
VA:
High
Description
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a user-mode, memory-protected module belongs to that module. Any loaded module can suspend, resume, terminate, reset or re-prioritise application threads and other modules' threads and abort their waits, denying service or changing how the system schedules them.
Weakness Classification (2)
Affected Software (2)
| Vendor | Product | Version |
|---|---|---|
| Eclipse Foundation | Eclipse ThreadX | 6.0.1 |
| Eclipse Foundation | Eclipse ThreadX | 6.0.1 |