Eclipse Foundation Eclipse ioFog

• CVE-2026-113644 Medium 5.5 iofogctl command injection via Controller provisioning response 0.2%
• CVE-2026-115216 Critical 9.1 Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials 0.2%
• CVE-2026-113620 Critical 9.8 Eclipse ioFog operator WebSocket accepts an unverified JWT 0.3%
• CVE-2026-113619 High 7.5 Eclipse ioFog renders request templates before authentication 0.4%