ThreadX

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Eclipse ThreadX NetX Duo HTTP component server denial of serviceCVE-2025-2260Eclipse Foundation · CVSS 7.1 · 1.0% likely

   CWE-459

2. Eclipse ThreadX NetX Duo component HTTP server single PUT request integer underflowCVE-2025-2259Eclipse Foundation · CVSS 5.3 · 1.0% likely

   CWE-191

3. Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-2258Eclipse Foundation · CVSS 5.3 · 1.0% likely

   CWE-191

4. Integer wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()CVE-2024-2452Eclipse Foundation · CVSS 7 · 0.9% likely

   CWE-120

5. Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-0728Eclipse Foundation · CVSS 5.3 · 0.8% likely

   CWE-191

6. Eclipse ThreadX NetX Duo HTTP server single PUT request integer underflowCVE-2025-0727Eclipse Foundation · CVSS 5.3 · 0.8% likely

   CWE-191

7. Eclipse ThreadX NetX Duo HTTP server denial of serviceCVE-2025-0726Eclipse Foundation · CVSS 7.1 · 0.8% likely

   CWE-459

8. Integer wraparounds, under-allocations, and heap buffer overflows in Eclipse ThreadX xQueueCreate() and xQueueCreateSet()CVE-2024-2212Eclipse Foundation · CVSS 7.3 · 0.5% likely

   CWE-122

9. Missing array size check in _Mtxinit() in the Xtensa portCVE-2024-2214Eclipse Foundation · CVSS 7 · 0.3% likely

   CWE-129

10. Incomplete validation of kernel object pointers in system callsCVE-2025-55078Eclipse Foundation · CVSS 5.7 · 0.2% likely

    CWE-233

11. Missing check for thread priorityCVE-2025-55079Eclipse Foundation · CVSS 5.7 · 0.2% likely

    CWE-770

12. Improper Parameter Check in ThreadX Syscall ImplementationCVE-2025-55080Eclipse Foundation · CVSS 7.2 · 0.1% likely

    CWE-233

13. An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the MPU enab…CVE-2026-102757Eclipse Foundation · CVSS 8.5 · 0.1% likely

    CWE-125

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.