Eclipse Foundation Eclipse KUKSA - Databroker

• CVE-2026-13699 Medium 4.3 Databroker 0.6.1 PublishValue missing data_point panic 0.4%
• CVE-2026-6272 High 8.5 A client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStream API by sending ProvideSignalRequest. 1. Obtain any valid t 0.3%