Skip to contentThe Eclipse Foundation Eclipse Kura vulnerabilities
- eclipse foundation kura, the eclipse foundation eclipse kura +1 moreIn Kura versions <= 5.6.2, the "Command" file-upload handler at `POST /admin/denali/file/command`...CVE-2026-1117297.0 High
- eclipse foundation kura, the eclipse foundation eclipse kura +1 moreIn Kura versions <= 5.6.2, `CommandCloudApp.execute()` extracts a caller-supplied ZIP archive...CVE-2026-974017.4 High
- eclipse foundation kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body...CVE-2026-1121868.7 High
- eclipse foundation kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura...CVE-2026-1121858.6 High
- eclipse foundation kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every...CVE-2026-978918.8 High
- eclipse foundation kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly...CVE-2026-974022.3 Low
- eclipse foundation kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs (identity/v1, and identity...CVE-2026-1121918.6 High
- eclipse foundation kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web...CVE-2026-1134227.7 High
- eclipse foundation kura, the eclipse foundation eclipse kura +1 moreEclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size...CVE-2026-1143597.0 High
- eclipse kura, the eclipse foundation eclipse kura +1 moreEclipse Kura versions prior to 5.6.2 trust the client-supplied X-Forwarded-For HTTP header as the...CVE-2026-95618.8 High
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, the Web UI package and component services, the Artemis...CVE-2019-102447.5 High
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, Kura exposes the underlying Ui Web server version in its...CVE-2019-102435.3 Medium
- eclipse kura, the eclipse foundation eclipse kura +1 moreIn Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during...CVE-2019-102425.3 Medium