Skip to contentEclipse Foundation vulnerabilities
Newest
- eclipse foundation threadx - guixGUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loaderCVE-2026-924466.8 Medium
- eclipse foundation threadx - guixBinary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arenaCVE-2026-924496.8 Medium
- eclipse foundation threadx - guixPNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds writeCVE-2026-911868.4 High
- eclipse foundation threadxModule queue front-send validates a word count as a byte countCVE-2026-951114.8 Medium
- eclipse foundation threadx - usbxUSBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle countCVE-2026-964025.2 Medium
- eclipse foundation openj9jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader)CVE-2026-974006.8 Medium
- eclipse foundation threadx - usbxVIDEO class descriptor walk consumes device-controlled wTotalLength as its boundCVE-2026-964064.9 Medium
- eclipse foundation threadx - usbxOut-of-bounds Read via Check-after-use in the USBX HID Report Descriptor ParserCVE-2026-965824.9 Medium
- eclipse foundation threadx - filexFileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT imageCVE-2026-910417.8 High
- eclipse foundation iofogEclipse ioFog operator WebSocket accepts an unverified JWTCVE-2026-1136209.8 Critical
- eclipse foundation iofogEclipse ioFog renders request templates before authenticationCVE-2026-1136197.5 High
- eclipse foundation csi - piajwks_uri from the OIDC discovery document is fetched without checking its origin or schemeCVE-2026-1075975.1 Medium
- eclipse foundation csi - piaPre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loopCVE-2026-1080626.9 Medium
- eclipse foundation adoptium temurinIn the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 ...CVE-2026-936497.5 High
- eclipse foundation connected services platformIn `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver...CVE-2026-1107237.5 High
- eclipse foundation connected services platformIn `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver...CVE-2026-1107247.5 High
- eclipse foundation connected services platformIn `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver...CVE-2026-1107266.5 Medium
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1024778.7 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1024648.2 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1024618.7 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1032248.2 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1032238.2 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1024668.2 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1024638.2 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1024699.2 Critical
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1024628.2 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1024658.2 High
- eclipse vert.xIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy...CVE-2026-1024758.7 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1024678.7 High
- eclipse vert.xCRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messagesCVE-2026-1024716.9 Medium
- eclipse vert.xIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the canonicalization process interprets w…CVE-2026-1024798.7 High
- eclipse vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0],...CVE-2026-1024608.6 High
- eclipse foundation vert.xIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this cache should reflect entirely the…CVE-2026-1024769.1 Critical
- eclipse foundation threadx netx duoMissing HelloVerifyRequest cookie validation in the NetX Secure DTLS serverCVE-2026-1064656.9 Medium
- eclipse foundation threadx netx duoOut-of-bounds read via an empty signature BIT STRING in NetX Secure X.509 parsingCVE-2026-1064648.7 High
- eclipse foundation netx duoWhen a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet. Both the length and the con…CVE-2026-1034159.3 Critical
- eclipse foundation guixThe GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic. Because gx_page_header_data_size is…CVE-2026-1034148.4 High
- eclipse foundation jaxb-ri (core)The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML...CVE-2026-928778.3 High
- eclipse foundation threadx - netx duoOut-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the cache writes past it and on into the rest of…CVE-2026-1034169.3 Critical
- eclipse foundation che, the eclipse foundation eclipse che +1 moreIn Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory...CVE-2026-866718.4 High
- eclipse foundation basyx aas web uiIn Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared...CVE-2026-1013228.3 High
- eclipse foundation netx duoMQTT WebSocket setter ABI mismatch may disclose memory or cause a crashCVE-2026-1027177.5 High
- eclipse foundation threadx levelxOut-of-bounds Write via NAND Metadata Parsing at Mount in LevelXCVE-2026-1027308.6 High
- eclipse foundation guix`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it...CVE-2026-1027295.9 Medium
- eclipse foundation threadx netx duoFTP Passive Data Connection Not Bound to the Authenticated Control PeerCVE-2026-1027276.0 Medium
- eclipse foundation threadx netx duoOut-of-bounds reads in NetX Secure client-side handshake parsing (ServerHello and HelloVerifyRequest)CVE-2026-1027286.3 Medium
- eclipse foundation threadx netx duoUnbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds ReadCVE-2026-1027267.1 High
- eclipse foundation threadx netx duoOut-of-bounds Read from Unvalidated MSRP Attribute List LengthCVE-2026-1027257.1 High
- eclipse foundation threadx netx duoNULL pointer dereference when evicting the last MSRP attribute in a participant's listCVE-2026-1027247.1 High
- eclipse foundation threadx netx duoNULL Pointer Dereference on MSRP Attribute Table ExhaustionCVE-2026-1027237.1 High
- Show moreLoading…