Login Request a demo
EF
Vendor
Eclipse Foundation
75 products with CVEs on record
259
CVEs
0
On KEV
104
New 30D
Products
ND
NetX Duo
Eclipse Foundation
9.3
32 CVEs0 on KEV21 new
EV
Eclipse Vert.x
Eclipse Foundation
9.1
20 CVEs0 on KEV16 new
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
8.8
9 CVEs0 on KEV9 new
ET
Eclipse ThreadX
Eclipse Foundation
8.5
9 CVEs0 on KEV8 new
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
9.3
8 CVEs0 on KEV6 new
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
8.4
7 CVEs0 on KEV7 new
EI
Eclipse ioFog
Eclipse Foundation
9.8
4 CVEs0 on KEV4 new
EJ
Eclipse Jetty
Eclipse Foundation
9.1
15 CVEs0 on KEV3 new
EO
Eclipse OpenJ9
Eclipse Foundation
8.7
6 CVEs0 on KEV4 new
EC
Eclipse Che
Eclipse Foundation
9.8
3 CVEs0 on KEV2 new
ET
Eclipse ThreadX - USBX
Eclipse Foundation
7.0
4 CVEs0 on KEV3 new
EC
Eclipse Connected Services Platform
Eclipse Foundation
7.5
3 CVEs0 on KEV3 new
EC
eclipse-threadx/netxduo
Eclipse Foundation
8.7
3 CVEs0 on KEV3 new
EC
eclipse-threadx/threadx
Eclipse Foundation
9.3
1 CVEs0 on KEV1 new
TH
ThreadX
Eclipse Foundation
8.5
11 CVEs0 on KEV2 new
EC
Eclipse CSI - PIA
Eclipse Foundation
8.8
5 CVEs0 on KEV2 new
GU
GUIX
Eclipse Foundation
8.4
2 CVEs0 on KEV2 new
AT
Adoptium Temurin
Eclipse Foundation
7.5
1 CVEs0 on KEV1 new
EB
Eclipse BaSyx AAS Web UI
Eclipse Foundation
8.3
1 CVEs0 on KEV1 new
EK
Eclipse KeyPont
Eclipse Foundation
5.5
1 CVEs0 on KEV1 new
ET
Eclipse ThreadX - FileX
Eclipse Foundation
7.8
1 CVEs0 on KEV1 new
ED
eclipse-threadx/levelx(NAND driver)
Eclipse Foundation
8.6
1 CVEs0 on KEV1 new
EM
`eclipse-threadx/threadx` (module manager / loadable-module loader)
Eclipse Foundation
5.7
1 CVEs0 on KEV1 new
JC
jaxb-ri (core)
Eclipse Foundation
8.3
1 CVEs0 on KEV1 new
NE
netxduo
Eclipse Foundation
6.3
1 CVEs0 on KEV1 new
EG
Eclipse Glassfish
Eclipse Foundation
9.8
12 CVEs0 on KEV0 new
ET
Eclipse Theia
Eclipse Foundation
8.8
12 CVEs0 on KEV0 new
EM
Eclipse Milo
Eclipse Foundation
8.2
6 CVEs0 on KEV0 new
JE
Jetty
Eclipse Foundation
7.5
6 CVEs0 on KEV0 new
EA
Eclipse aeriOS
Eclipse Foundation
9.9
4 CVEs0 on KEV0 new
EA
Eclipse Ankaios
Eclipse Foundation
8.4
4 CVEs0 on KEV0 new
EO
Eclipse OMR
Eclipse Foundation
9.8
4 CVEs0 on KEV0 new
US
USBX
Eclipse Foundation
9.1
4 CVEs0 on KEV0 new
ED
Eclipse Ditto
Eclipse Foundation
9.2
3 CVEs0 on KEV0 new
EO
Eclipse Open VSX
Eclipse Foundation
9.1
3 CVEs0 on KEV0 new
MO
mosquitto
Eclipse Foundation
9.8
3 CVEs0 on KEV0 new
OP
OpenJ9
Eclipse Foundation
9.6
3 CVEs0 on KEV0 new
VE
Vert.x
Eclipse Foundation
7.5
3 CVEs0 on KEV0 new
EA
Eclipse Arrowhead
Eclipse Foundation
9.5
2 CVEs0 on KEV0 new
EB
Eclipse BaSyx
Eclipse Foundation
10.0
2 CVEs0 on KEV0 new
EK
Eclipse KUKSA - Databroker
Eclipse Foundation
8.5
2 CVEs0 on KEV0 new
EO
Eclipse OpenMQ
Eclipse Foundation
9.8
2 CVEs0 on KEV0 new
ND
NextX Duo
Eclipse Foundation
9.8
2 CVEs0 on KEV0 new
BL
BlueChi
Eclipse Foundation
7.2
1 CVEs0 on KEV0 new
E4
Eclipse 4diac
Eclipse Foundation
9.8
1 CVEs0 on KEV0 new
EA
Eclipse Accessibility Tools Framework (ACTF)
Eclipse Foundation
5.5
1 CVEs0 on KEV0 new
EB
Eclipse BaSyx Go Components
Eclipse Foundation
9.8
1 CVEs0 on KEV0 new
EB
Eclipse BaSyx - Java Server SDK
Eclipse Foundation
9.0
1 CVEs0 on KEV0 new
EC
Eclipse Cyclone DDS
Eclipse Foundation
9.1
1 CVEs0 on KEV0 new
ED
Eclipse Data Plane Core
Eclipse Foundation
6.3
1 CVEs0 on KEV0 new
ED
Eclipse Dataspace Components
Eclipse Foundation
5.3
1 CVEs0 on KEV0 new
EE
Eclipse EDC Connector
Eclipse Foundation
8.1
1 CVEs0 on KEV0 new
EE
Eclipse Embedded CDT (C/C++ Development Tools)
Eclipse Foundation
9.1
1 CVEs0 on KEV0 new
EC
eclipse-hawkbit/hawkbit
Eclipse Foundation
4.3
1 CVEs0 on KEV0 new
EI
Eclipse iceoryx™
Eclipse Foundation
1.0
1 CVEs0 on KEV0 new
EJ
Eclipse Jetty - EE8
Eclipse Foundation
9.1
1 CVEs0 on KEV0 new
EJ
Eclipse Jetty - EE9
Eclipse Foundation
9.1
1 CVEs0 on KEV0 new
EK
Eclipse Kura
Eclipse Foundation
8.2
1 CVEs0 on KEV0 new
EL
Eclipse Lyo
Eclipse Foundation
9.1
1 CVEs0 on KEV0 new
EM
Eclipse Mojarra
Eclipse Foundation
7.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-114278
New
EC
Eclipse Che
Eclipse Foundation
9.8–Oct 28Unauthenticated Command Injection via kubeconfig Username in che-machine-exec
CVE-2026-115408
New
EK
Eclipse KeyPont
Eclipse Foundation
5.5
0%
Oct 27ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets
CVE-2026-113644
New
EI
Eclipse ioFog
Eclipse Foundation
5.5
0%
Oct 27iofogctl command injection via Controller provisioning response
CVE-2026-115216
New
EI
Eclipse ioFog
Eclipse Foundation
9.1
0%
Oct 27Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials
CVE-2026-89320
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
8.8
0%
Oct 23HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrity
CVE-2026-89319
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.3
0%
Oct 23JweDirectDecryptorBlock.Decrypt: unchecked _thales_aad length header reachable with forged tag → index-out-of-range / slice-bounds panic and unbounded allocation
CVE-2026-89318
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.9
0%
Oct 23JweRsaKeyEncryptionDecryptorImpl.Decrypt panics on attacker-chosen IV length (stdlib GCM.Open reached without nonce-size check)
CVE-2026-89317
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.3
0%
Oct 23JwtVerifierImpl.Verify does not enforce the JWS `crit` header (RFC 7515 §4.1.11)
CVE-2026-89316
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.3
0%
Oct 23LoadPublicKey panics on kty/alg mismatch (kty=EC with a non-EC alg) via unchecked *ECDSAOptions type assertion
CVE-2026-89315
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.9
0%
Oct 23JwtClaims.MarshalJSON panics via reflect.StructOf when any untyped claim key is not a valid Go identifier suffix
CVE-2026-89314
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.9
0%
Oct 23Quadratic-time key_ops duplicate check lets a sub-1 MB JWKS body pin a CPU core for ~15 s
CVE-2026-89313
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.3
0%
Oct 23JwksTrustStore.Get returns the last fetched JWKS key (err=nil) when the requested kid is absent, instead of nil
CVE-2026-89312
New
EK
Eclipse KeyPont - GOSE
Eclipse Foundation
6.9
0%
Oct 23AesGcmCryptor.Open passes attacker-controlled nonce to cipher.AEAD.Open without length check, causing panic on wrong-size IV
CVE-2026-110938
EO
Eclipse OpenJ9
Eclipse Foundation
8.7
0%
Oct 21JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing
CVE-2026-111075
EO
Eclipse OpenJ9
Eclipse Foundation
8.7
0%
Oct 21JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization
CVE-2026-111074
EO
Eclipse OpenJ9
Eclipse Foundation
8.7
0%
Oct 21JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity()
CVE-2026-93003
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
6.9
0%
Oct 20NetX Duo Web HTTP server interprets request body content as HTTP header fields
CVE-2026-95107
ET
Eclipse ThreadX
Eclipse Foundation
7.0
0%
Oct 20Module object allocation size overflow corrupts the manager object pool
CVE-2026-94202
ET
Eclipse ThreadX
Eclipse Foundation
4.8
0%
Oct 20Module block-pool create validates two of the four parameter words it reads
CVE-2026-95108
ET
Eclipse ThreadX
Eclipse Foundation
6.8
0%
Oct 20Deleting a user-mode module thread leaks its privileged kernel stack
CVE-2026-94024
ET
Eclipse ThreadX
Eclipse Foundation
6.9
0%
Oct 20Module Manager object lookup validates one byte of a module's search name
CVE-2026-94023
ET
Eclipse ThreadX
Eclipse Foundation
6.9
0%
Oct 20Module delete dispatchers do not enforce kernel-object ownership before irreversible deletion
CVE-2026-95109
ET
Eclipse ThreadX
Eclipse Foundation
8.5
0%
Oct 20Cortex-A7 module data validation checks only the first address of a caller-supplied range
CVE-2026-94192
ET
Eclipse ThreadX
Eclipse Foundation
8.5
0%
Oct 20Module object deallocation can free a live ThreadX kernel object
CVE-2026-92843
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
8.7
0%
Oct 20Out-of-bounds Read via the TLS 1.3 Certificate extensions_length in NetX Secure
CVE-2026-92853
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
8.7
0%
Oct 20Out-of-bounds Read via a Zero-length TLS 1.3 Certificate Message in NetX Secure
CVE-2026-94018
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
8.8
0%
Oct 20NetX Duo Web HTTP server releases an uninitialized packet pointer on the PUT Content-Length underflow path
CVE-2026-93475
ET
Eclipse ThreadX - NetX Duo
Eclipse Foundation
9.3
0%
Oct 20Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509
CVE-2026-91057
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
4.6
0%
Oct 20Out-of-bounds read when a multi-line text view string ends with a carriage return
CVE-2026-92454
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
6.1
0%
Oct 20JPEG decoder: truncated segments are read past the image buffer, and a zero sampling factor hangs the decode
CVE-2026-91059
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
6.8
0%
Oct 20JPEG decoder: a duplicate SOF0 after SOS publishes a pixelmap that misreports its own allocation size
CVE-2026-91189
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
7.1
0%
Oct 20GUIX binary resource loader: unvalidated glyph range causes an integer underflow and a heap out-of-bounds write when loading an untrusted font or theme
CVE-2026-92446
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
6.8
0%
Oct 20GUIX binary resource loader reads past the end of a resource, because no length for it ever reaches the loader
CVE-2026-92449
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
6.8
0%
Oct 20Binary resource loader: unbounded map_id from a theme file causes a heap out-of-bounds write in the GUIX-allocated arena
CVE-2026-91186
ET
Eclipse ThreadX - GUIX
Eclipse Foundation
8.4
0%
Oct 20PNG decoder: a duplicate IHDR chunk after IDAT resizes the image after allocation, causing a heap out-of-bounds write
CVE-2026-95111
ET
Eclipse ThreadX
Eclipse Foundation
4.8
0%
Oct 20Module queue front-send validates a word count as a byte count
CVE-2026-96402
ET
Eclipse ThreadX - USBX
Eclipse Foundation
5.2
0%
Oct 20USBX PIMA/MTP host class reads past its receive buffer when a device over-reports its object handle count
CVE-2026-97400
EO
Eclipse OpenJ9
Eclipse Foundation
6.8
0%
Oct 20jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader)
CVE-2026-96406
ET
Eclipse ThreadX - USBX
Eclipse Foundation
4.9
0%
Oct 20VIDEO class descriptor walk consumes device-controlled wTotalLength as its bound
CVE-2026-96582
ET
Eclipse ThreadX - USBX
Eclipse Foundation
4.9
0%
Oct 20Out-of-bounds Read via Check-after-use in the USBX HID Report Descriptor Parser
CVE-2026-91041
ET
Eclipse ThreadX - FileX
Eclipse Foundation
7.8
0%
Oct 20FileX fault-tolerant log replay writes past the destination sector when mounting a crafted FAT image
CVE-2026-113620
EI
Eclipse ioFog
Eclipse Foundation
9.8
0%
Oct 20Eclipse ioFog operator WebSocket accepts an unverified JWT
CVE-2026-113619
EI
Eclipse ioFog
Eclipse Foundation
7.5
0%
Oct 20Eclipse ioFog renders request templates before authentication
CVE-2026-107597
EC
Eclipse CSI - PIA
Eclipse Foundation
5.1
0%
Oct 20jwks_uri from the OIDC discovery document is fetched without checking its origin or scheme
CVE-2026-108062
EC
Eclipse CSI - PIA
Eclipse Foundation
6.9
0%
Oct 20Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop
CVE-2026-93649
AT
Adoptium Temurin
Eclipse Foundation
7.5
0%
Oct 15In the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-download page…
CVE-2026-110723
EC
Eclipse Connected Services Platform
Eclipse Foundation
7.5
0%
Oct 15In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the…
CVE-2026-110724
EC
Eclipse Connected Services Platform
Eclipse Foundation
7.5
0%
Oct 15In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the…
CVE-2026-110726
EC
Eclipse Connected Services Platform
Eclipse Foundation
6.5
0%
Oct 15In `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the leftmost element of the…
CVE-2026-77711
EJ
Eclipse Jetty
Eclipse Foundation
8.2
0%
Oct 15When Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required)
CVE-2026-76184
EJ
Eclipse Jetty
Eclipse Foundation
8.2
0%
Oct 15In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then HttpClient matches…
CVE-2026-76182
EJ
Eclipse Jetty
Eclipse Foundation
6.9
0%
Oct 15In Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where `$path` is the request path in…
CVE-2026-102477
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum size in bytes,…
CVE-2026-102464
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every inbound QoS 2 PUBLISH…
CVE-2026-102461
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison loop with no…
CVE-2026-103224
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads into a…
CVE-2026-103223
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field from the…
CVE-2026-102466
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array for column…
CVE-2026-102463
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecodeArray)…
CVE-2026-102469
EV
Eclipse Vert.x
Eclipse Foundation
5.9
0%
Oct 15In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handling code that…