EI
Product
Eclipse ioFog
by Eclipse Foundation · last CVE Oct 27, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 2High 1Medium 1Low 0
Watch

Add Eclipse ioFog to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-113620
9.8
0%
Oct 20
Eclipse ioFog operator WebSocket accepts an unverified JWT
Affected: 3.8.0 through 3.9.1
CVE-2026-115216
New
9.1–Oct 27
Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials
Affected: 3.8.0 before 3.9.2
Showing 2