[ Vendor · 108 CVEs ]

Eclipse Foundation

CVEs affecting Eclipse Foundation published in the last 30 days, plus any Eclipse Foundation CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-102712 29 Sep 2026 CVSS 8.8 Eclipse Foundation NetX DuoOn the first DTLS ClientHello, the parser copies a device-claimed session_id length and validates the ciphersuite-list length against the total…
CVE-2026-102713 29 Sep 2026 CVSS 8.8 Eclipse Foundation NetX DuoThe TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than four bytes (nxd_tftp_server.c:1037) and nothing…
CVE-2026-102714 29 Sep 2026 CVSS 7.1 Eclipse Foundation NetX Duo`_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validate_options.c:79`). An area whose size…
CVE-2026-102715 29 Sep 2026 CVSS 7.1 Eclipse Foundation eclipse-threadx/netxduoAny host on the LAN can send two mDNS records and make the responder write past the end of its transmit packet. The string table stores each name in…
CVE-2026-102716 29 Sep 2026 CVSS 8.7 Eclipse Foundation eclipse-threadx/netxduoAn unauthenticated client can drain the RTSP server's packet pool with a couple of dozen requests that carry a Session header the parser cannot…
CVE-2026-102709 29 Sep 2026 CVSS 8.4 Eclipse Foundation ThreadXImproper validation of non-secure (NS) pointers in multiple TrustZone-M non-secure callable (NSC) entry functions allows an attacker executing in the…
CVE-2026-9563 2 Jul 2026 CVSS 7.5 Eclipse Foundation Eclipse ParssonIn Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the number of…
CVE-2025-7962 21 Jul 2025 CVSS 6.0 Eclipse Foundation Jakarta MailIn Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different…
Page 2 of 2