CVE-2026-94018 - NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path
CVE ID :CVE-2026-94018 Published : Oct. 20, 2026, 3:10 p.m. | 56 minutes ago Description :The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow while processing a `PUT` request. The condition is reachable by an...