Eclipse Foundation Eclipse Arrowhead

• CVE-2026-80515 High 8.9 In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whether to apply its check by calling request.getRequestURL().to 0.5%
• CVE-2026-82180 Critical 9.5 In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an X.509 certificate that the client sends insid 0.3%