CVE-2026-115654: User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own
Eclipse Foundation · Eclipse ThreadX
Affected: Eclipse Foundation Eclipse ThreadX · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 2% of scored CVEs
DescriptionCVE.org
In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that a thread passed by a user-mode, memory-protected module belongs to that module. Any loaded module can suspend, resume, terminate, reset or re-prioritise application threads and other modules' threads and abort their waits, denying service or changing how the system schedules them.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Eclipse Foundation · Eclipse ThreadXfrom 6.0.1 up to and including 6.5.2.202603
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Unlikely (under 1%). EPSS under 1%, or no score yet.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Eclipse Foundation
- Published
- November 2026
CoverageNo articles yet
No CyberSIXT article names CVE-2026-115654 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.