Vulnerabilities in Eclipse Foundation
298 resultsCVE-2024-10525HIGHEclipse Mosquito: Heap Buffer Overflow in my_subscribe_callbackEPSS 59.2%CVE-2026-7411CRITICALIn Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauEPSS 3.7%CVE-2017-7650—In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or '+'. This allows localEPSS 2.5%CVE-2023-4759HIGHImproper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file writeEPSS 2.2%CVE-2017-7649—The network enabled distribution of Kura before 2.1.0 takes control over the device's firewall setup but does not allow IPv6 firewall rules EPSS 1.6%CVE-2026-12609HIGHIn Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/hostedPlugin/:pluginId/:path(*EPSS 1.6%CVE-2026-2332HIGHHTTP Request Smuggling via Chunked Extension Quoted-String ParsingEPSS 1.3%CVE-2023-4760HIGHRemote Code Execution in Eclipse RAP on WindowsEPSS 1.3%CVE-2024-0740CRITICALEclipse Target Management <= 4.5.500 Command InjectionEPSS 1.2%CVE-2024-8184MEDIUMJetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacksEPSS 1.0%CVE-2025-2258MEDIUMEclipse ThreadX NetX Duo HTTP server single PUT request integer underflowEPSS 1.0%CVE-2025-2259MEDIUMEclipse ThreadX NetX Duo component HTTP server single PUT request integer underflowEPSS 1.0%CVE-2025-2260HIGHEclipse ThreadX NetX Duo HTTP component server denial of serviceEPSS 1.0%CVE-2024-6763LOWJetty URI parsing of invalid authorityEPSS 1.0%CVE-2024-10838HIGHInteger Underflow in DDS_Security_Deserialize_ methods may lead to OOB readEPSS 0.9%CVE-2024-6762LOWJetty PushSessionCacheFilter can cause remote DoS attacksEPSS 0.9%CVE-2024-9823MEDIUMJetty DOS vulnerability on DosFilterEPSS 0.9%CVE-2026-85199HIGHEclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API. User-controlled identifiersEPSS 0.9%CVE-2024-2452HIGHInteger wraparound, under-allocation, and heap buffer overflow in Eclipse ThreadX NetX Duo __portable_aligned_alloc()EPSS 0.9%CVE-2026-114278CRITICALUnauthenticated Command Injection via kubeconfig Username in che-machine-execEPSS 0.9%