Skip to content
OpenAdvisories

Product · Eclipse Foundation

Eclipse ioFog

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-113619

    Eclipse ioFog renders request templates before authentication

    In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an uncapped Liquid engine before authentication and RBAC. The bearer check does not reject a missing or invalid t…

    Eclipse Foundation Eclipse ioFog