EEclipse Foundation

Products

Exploited and recent CVEs

• CVE-2026-123059 High 7.5 Keycloak admin client secret stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts 0.2%
• CVE-2026-123047 High 7.5 Keycloak admin user password stored in cleartext in a ConfigMap in Eclipse BaSyx Helm Charts 0.2%
• CVE-2026-120421 Medium 6.1 Reflected XSS via client window id in URL client window mode 0.2%
• CVE-2026-118487 High 7.5 Heap exhaustion via unbounded line accumulation in Vert.x STOMP FrameParser 0.7%
• CVE-2026-118488 Medium 5.9 Heap exhaustion via unbounded simple string or bulk string allocation in Vert.x Redis client 0.4%
• CVE-2026-118489 High 7.5 CachingWebClient shares user-specific HTTP responses across users via the shared cache tier 0.3%
• CVE-2026-89295 Unrated Unauthenticated memory-exhaustion denial of service in Eclipse Mnestix AAS Generator unbounded count parameter 0.2%
• CVE-2026-89293 High 8.8 Missing server-side authorization in Eclipse Mnestix Browser admin server actions allows unauthenticated configuration tampering 0.5%
• CVE-2026-89292 Critical 9.2 Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured Infrastructures 0.5%
• CVE-2026-92610 Unrated Improper limitation of paths in py-aspect-model-loader 0.2%
• CVE-2026-113421 High 7.3 ThreadX Modules invokes trace-full callbacks after module unload 0.1%
• CVE-2026-115231 High 8.5 User-mode module can post forged callback requests to another module's callback queue, running its code with that module's privilege 0.1%
• CVE-2026-115215 High 8.7 NetX Secure DTLS server allocates a session for each new source before the cookie exchange and never reclaims it, so spoofed datagrams exhaust the session pool 0.4%
• CVE-2026-115403 High 8.2 NULL pointer dereference in the BSD raw IPv6 send path when the destination table is full 0.3%
• CVE-2026-115654 Medium 6.9 User-mode module can suspend, terminate, re-prioritise and abort the waits of threads it does not own 0.1%
• CVE-2026-115653 High 7.0 Cortex-M module ports save a preempted user-mode module thread's registers through its unchecked stack pointer in privileged mode 0.1%
• CVE-2026-114408 High 8.7 NULL pointer dereference in ICMPv6 Packet Too Big processing when the destination table is full 0.4%
• CVE-2026-118052 Medium 6.8 Module Manager loaders leave the manager mutex held when a module preamble's sizes overflow, blocking every later module operation 0.1%
• CVE-2026-114278 Critical 9.8 Unauthenticated Command Injection via kubeconfig Username in che-machine-exec 0.9%
• CVE-2026-115408 Medium 5.5 ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets <0.1%
• CVE-2026-113644 Medium 5.5 iofogctl command injection via Controller provisioning response 0.2%
• CVE-2026-115216 Critical 9.1 Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials 0.2%
• CVE-2026-89320 High 8.8 HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrity 0.2%
• CVE-2026-89319 Medium 6.3 JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation 0.2%
• CVE-2026-89318 Medium 6.9 JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check) 0.2%
• CVE-2026-89317 Medium 6.3 JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11) 0.2%
• CVE-2026-89316 Medium 6.3 LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion 0.2%
• CVE-2026-89315 Medium 6.9 JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix 0.3%
• CVE-2026-89314 Medium 6.9 Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s 0.4%
• CVE-2026-89313 Medium 6.3 JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil 0.3%