Eclipse Foundation vulnerabilities
310 CVEs and advisories name Eclipse Foundation as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-102723NULL Pointer Dereference on MSRP Attribute Table Exhaustion
- CVE-2026-102722The FTP client trusts arbitrary IP addresses in the PASV server response
- CVE-2026-102721TFTP client and server copy the ERROR packet message without bounding the read against the packet
- CVE-2026-102720DHCP client option walk drifts one byte per skipped option, reading past the received message and past the saved options buffer
- CVE-2026-102719NetX Secure DTLS server issues predictable HelloVerifyRequest cookies, so a spoofed client can pass the return-routability check
- CVE-2026-102718Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER length
- CVE-2026-102716A malformed Session header permanently orphans one packet-pool block per RTSP request
- CVE-2026-102715mDNS string cache accepts a shorter name as a match for a longer stored one, so the known-answer encoder writes past the transmit packet
- CVE-2026-102714ICMPv6 option validation accepts a trailing byte residue, sending the Router Advertisement, Neighbor Solicitation, Neighbor Advertisement…
- CVE-2026-102713Unbounded DATA datagram in the NetX Duo TFTP server causes an out-of-bounds read and a permanent stall
- CVE-2026-102712Out-of-bounds read in the NetX Secure DTLS ClientHello parser
- CVE-2026-102711Out-of-bounds Read and Unverified Entry Pointers in the ThreadX Module Loader
- CVE-2026-102710In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, built with TX_ENABLE_EVENT_TRACE, the Module Manager lets a user-mode…
- CVE-2026-102709In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the four non-secure-callable secure stack functions of the TrustZone-M ports…
- CVE-2026-102762The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message.
- CVE-2026-102761NetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the l
- CVE-2026-102760When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP.
- CVE-2026-102759NetX Secure TLS accepts an empty application-data record without verifying its message authentication code.
- CVE-2026-102758The `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data.
- CVE-2026-102757An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode,
- CVE-2026-90882Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user data
- CVE-2026-92612In Eclipse iceoryx2 versions greater than v0.8.0, the StaticString exposes its contents as mutable bytes through safe APIs, while String::as
- CVE-2025-12999UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forward
- CVE-2026-92611In Eclipse Ankaios versions 0.6.0 to before 1.0.4, `LogRule::matches` in the agent control-interface authorizer stops at the first wildcard
- CVE-2026-86836In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIFOs) under a predicta
- CVE-2026-88819In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.
- CVE-2026-78299In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract f
- CVE-2026-89321Publishing limits the compressed size of a VSIX (ovsx.publishing.max-content-size, 512 MB by default) but nothing limited how large an entry
- CVE-2026-84197In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and o
- CVE-2026-86464In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager (IdM) deplo