[ Vendor · 99 CVEs ]
Eclipse Foundation
CVEs affecting Eclipse Foundation published in the last 30 days, plus any Eclipse Foundation CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110938 | 21 Oct 2026 | CVSS 8.7 | Eclipse Foundation Eclipse OpenJ9In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol… | |
| CVE-2026-111074 | 21 Oct 2026 | CVSS 8.7 | Eclipse Foundation Eclipse OpenJ9In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote denial of service. When processing… | |
| CVE-2026-111075 | 21 Oct 2026 | CVSS 8.7 | Eclipse Foundation Eclipse OpenJ9In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on attacker-controlled `_size`… | |
| CVE-2026-94192 | 20 Oct 2026 | CVSS 8.5 | Eclipse Foundation Eclipse ThreadXA ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask for that memory back by… | |
| CVE-2026-94202 | 20 Oct 2026 | CVSS 4.8 | Eclipse Foundation Eclipse ThreadXThe Module Manager's block-pool create dispatcher proved that two `ALIGN_TYPE` words of the extra-parameter array a memory-protected module supplies… | |
| CVE-2026-95107 | 20 Oct 2026 | CVSS 7.0 | Eclipse Foundation Eclipse ThreadXA ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`. The Module Manager adds its own 16-byte private header to that… | |
| CVE-2026-95108 | 20 Oct 2026 | CVSS 6.8 | Eclipse Foundation Eclipse ThreadXOne logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not one. The module asks for a… | |
| CVE-2026-95109 | 20 Oct 2026 | CVSS 8.5 | Eclipse Foundation Eclipse ThreadXThe Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byte. The common Module Manager hands… | |
| CVE-2026-92843 | 20 Oct 2026 | CVSS 8.7 | Eclipse Foundation Eclipse ThreadX - NetX DuoA missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger an unsigned-integer underflow… | |
| CVE-2026-92853 | 20 Oct 2026 | CVSS 8.7 | Eclipse Foundation Eclipse ThreadX - NetX DuoThe TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without first establishing that the… | |
| CVE-2026-93003 | 20 Oct 2026 | CVSS 6.9 | Eclipse Foundation Eclipse ThreadX - NetX DuoThe Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of the header section. A header… | |
| CVE-2026-93475 | 20 Oct 2026 | CVSS 9.3 | Eclipse Foundation Eclipse ThreadX - NetX DuoThe X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts into fixed-size buffers… | |
| CVE-2026-94018 | 20 Oct 2026 | CVSS 8.8 | Eclipse Foundation Eclipse ThreadX - NetX DuoThe Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length` underflow while processing a `PUT`… | |
| CVE-2026-94023 | 20 Oct 2026 | CVSS 6.9 | Eclipse Foundation Eclipse ThreadXA ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one question about the pointer… | |
| CVE-2026-94024 | 20 Oct 2026 | CVSS 6.9 | Eclipse Foundation Eclipse ThreadXThe Module Manager's object lookup validated one byte of a memory-protected module's search name and then walked as much of it as the module… | |
| CVE-2026-91057 | 20 Oct 2026 | CVSS 4.6 | Eclipse Foundation Eclipse ThreadX - GUIX`_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the string it is given ends with a… | |
| CVE-2026-96402 | 20 Oct 2026 | CVSS 5.2 | Eclipse Foundation Eclipse ThreadX - USBXA malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration, leaking adjacent heap contents… | |
| CVE-2026-97400 | 20 Oct 2026 | CVSS 6.8 | Eclipse Foundation Eclipse OpenJ9In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the… | |
| CVE-2026-91186 | 20 Oct 2026 | CVSS 8.4 | Eclipse Foundation Eclipse ThreadX - GUIXThe PNG chunk reader has no notion of chunk ordering. It records whether an IDAT has been seen and whether a tRNS has already supplied transparency… | |
| CVE-2026-91189 | 20 Oct 2026 | CVSS 7.1 | Eclipse Foundation Eclipse ThreadX - GUIXThe GUIX binary resource loader never checks that a font page's glyph range is well formed. `gx_page_header_first_glyph` and… | |
| CVE-2026-92446 | 20 Oct 2026 | CVSS 6.8 | Eclipse Foundation Eclipse ThreadX - GUIX`gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and `GX_BINRES_DATA_INFO` has no field… | |
| CVE-2026-92449 | 20 Oct 2026 | CVSS 6.8 | Eclipse Foundation Eclipse ThreadX - GUIX`_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value read verbatim from the resource… | |
| CVE-2026-92454 | 20 Oct 2026 | CVSS 6.1 | Eclipse Foundation Eclipse ThreadX - GUIXThe GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold what it reads. A truncated… | |
| CVE-2026-95111 | 20 Oct 2026 | CVSS 4.8 | Eclipse Foundation Eclipse ThreadXA memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much of the module's buffer the… | |
| CVE-2026-91059 | 20 Oct 2026 | CVSS 6.8 | Eclipse Foundation Eclipse ThreadX - GUIXThe GUIX JPEG software decoder enforces no ordering on JPEG markers. A file that places a second `SOF0` frame header after `SOS` re-runs the frame… | |
| CVE-2026-91041 | 20 Oct 2026 | CVSS 7.8 | Eclipse Foundation Eclipse ThreadX - FileXMounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log replay. The write is… | |
| CVE-2026-96406 | 20 Oct 2026 | CVSS 4.9 | Eclipse Foundation Eclipse ThreadX - USBXA VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of its input header. The USBX… | |
| CVE-2026-96582 | 20 Oct 2026 | CVSS 4.9 | Eclipse Foundation Eclipse ThreadX - USBXA HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow. The USBX host walks that sequence by… | |
| CVE-2026-113619 | 20 Oct 2026 | CVSS 7.5 | Eclipse Foundation Eclipse ioFogIn Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an… | |
| CVE-2026-113620 | 20 Oct 2026 | CVSS 9.8 | Eclipse Foundation Eclipse ioFogIn Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not verify the bearer JWT. The… | |
| CVE-2026-108062 | 20 Oct 2026 | CVSS 6.9 | Eclipse Foundation Eclipse CSI - PIAPre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the whole… | |
| CVE-2026-107597 | 20 Oct 2026 | CVSS 5.1 | Eclipse Foundation Eclipse CSI - PIAPIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer and then follows the… | |
| CVE-2026-93649 | 15 Oct 2026 | CVSS 7.5 | Eclipse Foundation Adoptium TemurinIn the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf… | |
| CVE-2026-110723 | 15 Oct 2026 | CVSS 7.5 | Eclipse Foundation Eclipse Connected Services PlatformIn `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the… | |
| CVE-2026-110724 | 15 Oct 2026 | CVSS 7.5 | Eclipse Foundation Eclipse Connected Services PlatformIn `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the… | |
| CVE-2026-110726 | 15 Oct 2026 | CVSS 6.5 | Eclipse Foundation Eclipse Connected Services PlatformIn `api-gateway` versions till `1.7.3`, The default rate-limit key resolver, `ClientIpKeyResolver`, derives the per-client bucket key from the… | |
| CVE-2026-18660 | 15 Oct 2026 | CVSS 8.8 | Eclipse FoundationIn Eclipse Jetty, across various versions of `jetty-server`, and `jetty-proxy`, the host whitelist/blacklist is case-sensitive, and would allow hosts… | |
| CVE-2026-18662 | 15 Oct 2026 | CVSS 6.9 | Eclipse FoundationIn Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, two or more security constraints with the same… | |
| CVE-2026-19863 | 15 Oct 2026 | CVSS 9.3 | Eclipse FoundationAn unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login… | |
| CVE-2026-19864 | 15 Oct 2026 | CVSS 5.6 | Eclipse FoundationEclipse Jetty's `SessionAuthentication` retains authentication credentials in a serializable object. When the credentials contain a plaintext… | |
| CVE-2026-18659 | 15 Oct 2026 | CVSS 6.9 | Eclipse FoundationIn Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints… | |
| CVE-2026-76182 | 15 Oct 2026 | CVSS 6.9 | Eclipse Foundation Eclipse JettyIn Eclipse Jetty, `TryPathsHandler` and `TryFilesFilter` can be configured to forward requests to template URIs such as `index?p=$path`, where… | |
| CVE-2026-76184 | 15 Oct 2026 | CVSS 8.2 | Eclipse Foundation Eclipse JettyIn Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/../evil ``` If an attacker is able to control the redirects, then… | |
| CVE-2026-77711 | 15 Oct 2026 | CVSS 8.2 | Eclipse Foundation Eclipse JettyWhen Jetty's `HttpClient` make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required). The… | |
| CVE-2026-18661 | 15 Oct 2026 | CVSS 8.8 | Eclipse FoundationIn Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for… | |
| CVE-2026-102462 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client… | |
| CVE-2026-102463 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client… | |
| CVE-2026-102464 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient… | |
| CVE-2026-102466 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client)… | |
| CVE-2026-102469 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains… | |
| CVE-2026-102477 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message… | |
| CVE-2026-103223 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte… | |
| CVE-2026-103224 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound… | |
| CVE-2026-102461 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²)… | |
| CVE-2026-102465 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates… | |
| CVE-2026-102467 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not define a… | |
| CVE-2026-102475 | 15 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a… | |
| CVE-2026-102460 | 14 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse… | |
| CVE-2026-102471 | 14 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or… | |
| CVE-2026-102479 | 14 Oct 2026 | CVSS 5.9 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP… | |
| CVE-2026-106465 | 14 Oct 2026 | CVSS 8.7 | Eclipse Foundation NetX DuoThe NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The… | |
| CVE-2026-106464 | 14 Oct 2026 | CVSS 8.7 | Eclipse Foundation NetX Duo`_nx_secure_x509_parse_signature_data` computes the certificate signature's length as `tlv_length - 1` without first checking that `tlv_length` is… | |
| CVE-2026-103414 | 14 Oct 2026 | CVSS 8.4 | Eclipse Foundation GUIXThe GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent… | |
| CVE-2026-103415 | 14 Oct 2026 | CVSS 9.3 | Eclipse Foundation NetX DuoWhen a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits… | |
| CVE-2026-102476 | 14 Oct 2026 | CVSS 9.1 | Eclipse Foundation Eclipse Vert.xIn Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose… | |
| CVE-2026-92877 | 12 Oct 2026 | CVSS 8.3 | Eclipse Foundation jaxb-ri (core)The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution. On JAXP… | |
| CVE-2026-103416 | 7 Oct 2026 | CVSS 9.3 | Eclipse Foundation Eclipse ThreadX - NetX DuoOut-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger… | |
| CVE-2026-86671 | 5 Oct 2026 | CVSS 8.4 | Eclipse Foundation Eclipse CheIn Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled URL to… | |
| CVE-2026-101322 | 1 Oct 2026 | CVSS 8.3 | Eclipse Foundation Eclipse BaSyx AAS Web UIIn Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler attached the selected infrastructure's… | |
| CVE-2026-102717 | 30 Sep 2026 | CVSS 7.5 | Eclipse Foundation NetX DuoMQTT WebSocket setter ABI mismatch may disclose memory or cause a crash | |
| CVE-2026-102758 | 29 Sep 2026 | CVSS 7.5 | Eclipse Foundation NetX DuoThe `_nx_secure_x509_asn1_tlv_block_parse()` function parses ASN.1 TLV (tag-length-value) blocks out of DER-encoded data. It is the primitive… | |
| CVE-2026-102759 | 29 Sep 2026 | CVSS 6.3 | Eclipse Foundation NetX DuoNetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In `_nx_secure_verify_mac`, a decrypted… | |
| CVE-2026-102760 | 29 Sep 2026 | CVSS 8.3 | Eclipse Foundation NetX DuoWhen NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP. By then… | |
| CVE-2026-102761 | 29 Sep 2026 | CVSS 9.3 | Eclipse Foundation NetX DuoNetX Duo's WebSocket client resets the unmasking cursor to the first `NX_PACKET` each time it advances through a chained packet, while the loop's… | |
| CVE-2026-102762 | 29 Sep 2026 | CVSS 8.2 | Eclipse Foundation NetX DuoThe NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets… | |
| CVE-2026-102725 | 29 Sep 2026 | CVSS 6.0 | Eclipse Foundation NetX DuoOut-of-bounds Read from Unvalidated MSRP Attribute List Length | |
| CVE-2026-102726 | 29 Sep 2026 | CVSS 6.0 | Eclipse Foundation NetX DuoUnbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read | |
| CVE-2026-102727 | 29 Sep 2026 | CVSS 6.0 | Eclipse Foundation NetX DuoFTP Passive Data Connection Not Bound to the Authenticated Control Peer | |
| CVE-2026-102728 | 29 Sep 2026 | CVSS 7.5 | Eclipse Foundation NetX DuoTwo client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before validating that the message is long… | |
| CVE-2026-102729 | 29 Sep 2026 | CVSS 5.9 | Eclipse Foundation GUIX`gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for, and allocates it even when the resource holds no theme with that id… | |
| CVE-2026-102730 | 29 Sep 2026 | CVSS 8.6 | Eclipse Foundation eclipse-threadx/levelx(NAND driver)Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) triggers an unbounded out-of-bounds heap **write** in LevelX's NAND… | |
| CVE-2026-102757 | 29 Sep 2026 | CVSS 8.5 | Eclipse Foundation ThreadXAn unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can… | |
| CVE-2026-102718 | 29 Sep 2026 | CVSS 8.7 | Eclipse Foundation NetX Duohey, `_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not validate the claimed OID data length against the actual buffer size when… | |
| CVE-2026-102719 | 29 Sep 2026 | CVSS 6.3 | Eclipse Foundation netxduoPredictable DTLS HelloVerifyRequest Cookie in NetX Secure | |
| CVE-2026-102720 | 29 Sep 2026 | CVSS 5.3 | Eclipse Foundation eclipse-threadx/netxduoA DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the client read about a kilobyte past the end of the received message. The… | |
| CVE-2026-102721 | 29 Sep 2026 | CVSS 6.9 | Eclipse Foundation NetX DuoA TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only… | |
| CVE-2026-102722 | 29 Sep 2026 | CVSS 6.9 | Eclipse Foundation NetX DuoIn the IPv4 PASV path, the FTP Client accepts whatever address was sent in the server's `227` reply. Validation only covers the parse and the… | |
| CVE-2026-102723 | 29 Sep 2026 | CVSS 6.0 | Eclipse Foundation NetX DuoNULL Pointer Dereference on MSRP Attribute Table Exhaustion | |
| CVE-2026-102724 | 29 Sep 2026 | CVSS 6.0 | Eclipse Foundation NetX DuoNULL Pointer Dereference When Evicting the Sole MSRP Attribute | |
| CVE-2026-102710 | 29 Sep 2026 | CVSS 9.3 | Eclipse Foundation eclipse-threadx/threadxAttacker model / Preconditions: a loaded `TXM_MODULE_USER_MODE | TXM_MODULE_MEMORY_PROTECTION` module issuing kernel dispatch calls, on a build with… | |
| CVE-2026-102711 | 29 Sep 2026 | CVSS 5.7 | Eclipse Foundation `eclipse-threadx/threadx` (module manager / loadable-module loader)Two issues in the ThreadX loadable-module loader, reached when a device loads an attacker-controlled module object via… | |
| CVE-2026-102712 | 29 Sep 2026 | CVSS 8.8 | Eclipse Foundation NetX DuoOn the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the ciphersuite-list length against the total… | |
| CVE-2026-102713 | 29 Sep 2026 | CVSS 8.8 | Eclipse Foundation NetX DuoThe TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than four bytes (nxd_tftp_server.c:1037) and nothing… | |
| CVE-2026-102714 | 29 Sep 2026 | CVSS 7.1 | Eclipse Foundation NetX Duo`_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validate_options.c:79`). An area whose size… | |
| CVE-2026-102715 | 29 Sep 2026 | CVSS 7.1 | Eclipse Foundation eclipse-threadx/netxduoAny host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. The string table stores each name in… | |
| CVE-2026-102716 | 29 Sep 2026 | CVSS 8.7 | Eclipse Foundation eclipse-threadx/netxduoAn unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser cannot… | |
| CVE-2026-102709 | 29 Sep 2026 | CVSS 8.4 | Eclipse Foundation ThreadXImproper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the… | |
| CVE-2026-9563 | 2 Jul 2026 | CVSS 7.5 | Eclipse Foundation Eclipse ParssonIn Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number of… | |
| CVE-2025-7962 | 21 Jul 2025 | CVSS 6.0 | Eclipse Foundation Jakarta MailIn Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different… |