EI
Product
Eclipse ioFog
4
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch
Add Eclipse ioFog to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-113620 | 9.8 | Oct 20 | Eclipse ioFog operator WebSocket accepts an unverified JWT Affected: 3.8.0 through 3.9.1 |
| CVE-2026-115216 New | 9.1 | Oct 27 | Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials Affected: 3.8.0 before 3.9.2 |
| CVE-2026-113619 | 7.5 | Oct 20 | Eclipse ioFog renders request templates before authentication Affected: 3.8.0 through 3.9.1 |
| CVE-2026-113644 New | 5.5 | Oct 27 | iofogctl command injection via Controller provisioning response Affected: 1.0.0 through 3.7.0; 3.8.0-rc.1 before 3.9.2 |
Showing 4