Login Request a demo
ED
Product
Eclipse Ditto
by Eclipse Foundation · last CVE Sep 8, 2026
3
CVEs
0
On KEV
9.2
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 1Medium 1Low 0
Severity
All severities3Critical1High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Eclipse Ditto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-84197
9.2
0%
Sep 8
In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package…
Affected: 2.0.0 before 3.8.1; 3.9.0 before 3.9.1; 1.0.0 through 2.1.0
CVE-2026-82958
7.6
0%
Sep 2
In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by substituting placeholder values (e.g
Affected: 1.3.0 through 3.9.6
CVE-2026-84175
5.3
0%
Sep 2
In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing…
Affected: 3.9.0 through 3.9.6; 3.0.0 through 3.8.12; 2.4.0 before 3.0.0
Showing 3