Login Request a demo
EF
Vendor
Eclipse Foundation
57 products with CVEs on record
186
CVEs
0
On KEV
103
New 30D
Products
ND
NetX Duo
Eclipse Foundation
9.3
21 CVEs0 on KEV21 new
EV
Eclipse Vert.x
Eclipse Foundation
9.1
20 CVEs0 on KEV16 new
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
8.8
9 CVEs0 on KEV9 new
ET
Eclipse ThreadX
Eclipse Foundation
8.5
8 CVEs0 on KEV8 new
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
9.3
7 CVEs0 on KEV6 new
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
8.4
7 CVEs0 on KEV7 new
EI
Eclipse ioFog
Eclipse Foundation
9.8
4 CVEs0 on KEV4 new
EJ
Eclipse Jetty
Eclipse Foundation
9.1
11 CVEs0 on KEV3 new
EO
Eclipse OpenJ9
Eclipse Foundation
8.7
6 CVEs0 on KEV4 new
EC
Eclipse Connected Services Platform
Eclipse Foundation
7.5
3 CVEs0 on KEV3 new
EC
eclipse-threadx/netxduo
Eclipse Foundation
8.7
3 CVEs0 on KEV3 new
ET
Eclipse ThreadX - USBX
Eclipse Foundation
5.2
3 CVEs0 on KEV3 new
EC
eclipse-threadx/threadx
Eclipse Foundation
9.3
1 CVEs0 on KEV1 new
EC
Eclipse CSI - PIA
Eclipse Foundation
8.8
5 CVEs0 on KEV2 new
GU
GUIX
Eclipse Foundation
8.4
2 CVEs0 on KEV2 new
TH
ThreadX
Eclipse Foundation
8.5
2 CVEs0 on KEV2 new
EC
Eclipse Che
Eclipse Foundation
8.4
2 CVEs0 on KEV1 new
AT
Adoptium Temurin
Eclipse Foundation
7.5
1 CVEs0 on KEV1 new
EB
Eclipse BaSyx AAS Web UI
Eclipse Foundation
8.3
1 CVEs0 on KEV1 new
EK
Eclipse KeyPont
Eclipse Foundation
5.5
1 CVEs0 on KEV1 new
ET
Eclipse ThreadX - FileX
Eclipse Foundation
7.8
1 CVEs0 on KEV1 new
ED
eclipse-threadx/levelx(NAND driver)
Eclipse Foundation
8.6
1 CVEs0 on KEV1 new
EM
`eclipse-threadx/threadx` (module manager / loadable-module loader)
Eclipse Foundation
5.7
1 CVEs0 on KEV1 new
JC
jaxb-ri (core)
Eclipse Foundation
8.3
1 CVEs0 on KEV1 new
NE
netxduo
Eclipse Foundation
6.3
1 CVEs0 on KEV1 new
ET
Eclipse Theia
Eclipse Foundation
8.8
12 CVEs0 on KEV0 new
EM
Eclipse Milo
Eclipse Foundation
8.2
6 CVEs0 on KEV0 new
EA
Eclipse aeriOS
Eclipse Foundation
9.9
4 CVEs0 on KEV0 new
EA
Eclipse Ankaios
Eclipse Foundation
8.4
4 CVEs0 on KEV0 new
EG
Eclipse Glassfish
Eclipse Foundation
9.6
4 CVEs0 on KEV0 new
ED
Eclipse Ditto
Eclipse Foundation
9.2
3 CVEs0 on KEV0 new
EO
Eclipse Open VSX
Eclipse Foundation
9.1
3 CVEs0 on KEV0 new
EA
Eclipse Arrowhead
Eclipse Foundation
9.5
2 CVEs0 on KEV0 new
EB
Eclipse BaSyx
Eclipse Foundation
10.0
2 CVEs0 on KEV0 new
OP
OpenJ9
Eclipse Foundation
9.6
2 CVEs0 on KEV0 new
E4
Eclipse 4diac
Eclipse Foundation
9.8
1 CVEs0 on KEV0 new
EA
Eclipse Accessibility Tools Framework (ACTF)
Eclipse Foundation
5.5
1 CVEs0 on KEV0 new
EB
Eclipse BaSyx Go Components
Eclipse Foundation
9.8
1 CVEs0 on KEV0 new
EB
Eclipse BaSyx - Java Server SDK
Eclipse Foundation
9.0
1 CVEs0 on KEV0 new
ED
Eclipse Data Plane Core
Eclipse Foundation
6.3
1 CVEs0 on KEV0 new
EE
Eclipse Embedded CDT (C/C++ Development Tools)
Eclipse Foundation
9.1
1 CVEs0 on KEV0 new
EC
eclipse-hawkbit/hawkbit
Eclipse Foundation
4.3
1 CVEs0 on KEV0 new
EI
Eclipse iceoryx™
Eclipse Foundation
1.0
1 CVEs0 on KEV0 new
EJ
Eclipse Jetty - EE8
Eclipse Foundation
9.1
1 CVEs0 on KEV0 new
EJ
Eclipse Jetty - EE9
Eclipse Foundation
9.1
1 CVEs0 on KEV0 new
EK
Eclipse KUKSA - Databroker
Eclipse Foundation
6.5
1 CVEs0 on KEV0 new
EK
Eclipse Kura
Eclipse Foundation
8.2
1 CVEs0 on KEV0 new
EL
Eclipse Lyo
Eclipse Foundation
9.1
1 CVEs0 on KEV0 new
EM
Eclipse Mojarra
Eclipse Foundation
7.5
1 CVEs0 on KEV0 new
EO
Eclipse OMR
Eclipse Foundation
7.5
1 CVEs0 on KEV0 new
EO
Eclipse OpenVSX
Eclipse Foundation
4.3
1 CVEs0 on KEV0 new
EP
Eclipse Parsson
Eclipse Foundation
7.5
1 CVEs0 on KEV0 new
ER
Eclipse RDF4J
Eclipse Foundation
8.7
1 CVEs0 on KEV0 new
ES
Eclipse SW360
Eclipse Foundation
6.0
1 CVEs0 on KEV0 new
ET
Eclipse tinydtls
Eclipse Foundation
6.9
1 CVEs0 on KEV0 new
OP
open-vsx.org
Eclipse Foundation
8.7
1 CVEs0 on KEV0 new
VE
Vert.x
Eclipse Foundation
7.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-115408
New
EK
Eclipse KeyPont
Eclipse Foundation
5.5–Oct 27ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets
CVE-2026-113644
New
EI
Eclipse ioFog
Eclipse Foundation
5.5–Oct 27iofogctl command injection via Controller provisioning response
CVE-2026-115216
New
EI
Eclipse ioFog
Eclipse Foundation
9.1–Oct 27Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials
CVE-2026-89320
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
8.8
0%
Oct 23HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrity
CVE-2026-89319
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.3
0%
Oct 23JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation
CVE-2026-89318
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.9
0%
Oct 23JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check)
CVE-2026-89317
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.3
0%
Oct 23JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)
CVE-2026-89316
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.3
0%
Oct 23LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion
CVE-2026-89315
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.9
0%
Oct 23JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix
CVE-2026-89314
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.9
0%
Oct 23Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s
CVE-2026-89313
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.3
0%
Oct 23JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil
CVE-2026-89312
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.9
0%
Oct 23AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV
CVE-2026-110938
EO
Eclipse OpenJ9
Eclipse Foundation
8.7
0%
Oct 21JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing
CVE-2026-111075
EO
Eclipse OpenJ9
Eclipse Foundation
8.7
0%
Oct 21JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization
CVE-2026-111074
EO
Eclipse OpenJ9
Eclipse Foundation
8.7
0%
Oct 21JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()
CVE-2026-93003
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
6.9
0%
Oct 20NetX Duo Web HTTP server interprets request body content as HTTP header fields
CVE-2026-95107
ET
Eclipse ThreadX
Eclipse Foundation
7.0
0%
Oct 20Module object allocation size overflow corrupts the manager object pool
CVE-2026-94202
ET
Eclipse ThreadX
Eclipse Foundation
4.8
0%
Oct 20Module block-pool create validates two of the four parameter words it reads
CVE-2026-95108
ET
Eclipse ThreadX
Eclipse Foundation
6.8
0%
Oct 20Deleting a user-mode module thread leaks its privileged kernel stack
CVE-2026-94024
ET
Eclipse ThreadX
Eclipse Foundation
6.9
0%
Oct 20Module Manager object lookup validates one byte of a module's search name
CVE-2026-94023
ET
Eclipse ThreadX
Eclipse Foundation
6.9
0%
Oct 20Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion
CVE-2026-95109
ET
Eclipse ThreadX
Eclipse Foundation
8.5
0%
Oct 20Cortex-A7 module data validation checks only the first address of a caller-supplied range
CVE-2026-94192
ET
Eclipse ThreadX
Eclipse Foundation
8.5
0%
Oct 20Module object deallocation can free a live ThreadX kernel object
CVE-2026-92843
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
8.7
0%
Oct 20Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX Secure
CVE-2026-92853
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
8.7
0%
Oct 20Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Secure
CVE-2026-94018
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
8.8
0%
Oct 20NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path
CVE-2026-93475
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
9.3
0%
Oct 20Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509
CVE-2026-91057
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
4.6
0%
Oct 20Out-of-bounds read when a multi-line text view string ends with a carriage return
CVE-2026-92454
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
6.1
0%
Oct 20JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode
CVE-2026-91059
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
6.8
0%
Oct 20JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size
CVE-2026-91189
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
7.1
0%
Oct 20GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme
CVE-2026-92446
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
6.8
0%
Oct 20GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader
CVE-2026-92449
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
6.8
0%
Oct 20Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena
CVE-2026-91186
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
8.4
0%
Oct 20PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write
CVE-2026-95111
ET
Eclipse ThreadX
Eclipse Foundation
4.8
0%
Oct 20Module queue front-send validates a word count as a byte count
CVE-2026-96402
ET
Eclipse ThreadX - USBX
Eclipse Foundation
5.2
0%
Oct 20USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count
CVE-2026-97400
EO
Eclipse OpenJ9
Eclipse Foundation
6.8
0%
Oct 20jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader)
CVE-2026-96406
ET
Eclipse ThreadX - USBX
Eclipse Foundation
4.9
0%
Oct 20VIDEO class descriptor walk consumes device-controlled wTotalLength as its bound
CVE-2026-96582
ET
Eclipse ThreadX - USBX
Eclipse Foundation
4.9
0%
Oct 20Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser
CVE-2026-91041
ET
Eclipse ThreadX - FileX
Eclipse Foundation
7.8
0%
Oct 20FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image
CVE-2026-113620
EI
Eclipse ioFog
Eclipse Foundation
9.8
0%
Oct 20Eclipse ioFog operator WebSocket accepts an unverified JWT
CVE-2026-113619
EI
Eclipse ioFog
Eclipse Foundation
7.5
0%
Oct 20Eclipse ioFog renders request templates before authentication
CVE-2026-107597
EC
Eclipse CSI - PIA
Eclipse Foundation
5.1
0%
Oct 20jwks_uri from the OIDC discovery document is fetched without checking its origin or scheme
CVE-2026-108062
EC
Eclipse CSI - PIA
Eclipse Foundation
6.9
0%
Oct 20Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop
CVE-2026-93649
AT
Adoptium Temurin
Eclipse Foundation
7.5
0%
Oct 15In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-download page…
CVE-2026-110723
EC
Eclipse Connected Services Platform
Eclipse Foundation
7.5
0%
Oct 15In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the…
CVE-2026-110724
EC
Eclipse Connected Services Platform
Eclipse Foundation
7.5
0%
Oct 15In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the…
CVE-2026-110726
EC
Eclipse Connected Services Platform
Eclipse Foundation
6.5
0%
Oct 15In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the…
CVE-2026-77711
EJ
Eclipse Jetty
Eclipse Foundation
8.2
0%
Oct 15When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required)
CVE-2026-76184
EJ
Eclipse Jetty
Eclipse Foundation
8.2
0%
Oct 15In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches…
CVE-2026-76182
EJ
Eclipse Jetty
Eclipse Foundation
6.9
0%
Oct 15In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in…
CVE-2026-102477
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum size in bytes,…
CVE-2026-102464
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every inbound QoS 2 PUBLISH…
CVE-2026-102461
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison loop with no…
CVE-2026-103224
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a…
CVE-2026-103223
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the…
CVE-2026-102466
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column…
CVE-2026-102463
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecodeArray)…
CVE-2026-102469
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that…
CVE-2026-102462
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates…