Vendor
Eclipse Foundation
305 known vulnerabilities.
Products
Eclipse ThreadX - NetX Duo 27
Eclipse Vert.x 23
Eclipse ThreadX 19
NetX Duo 18
Eclipse Jetty 15
ThreadX 13
Eclipse Theia 12
Eclipse Glassfish 12
Eclipse KeyPont - GOSE 9
Eclipse ThreadX - GUIX 7
Eclipse OpenJ9 7
Jetty 6
Eclipse Milo 6
Eclipse CSI - PIA 5
Eclipse Ankaios 4
Eclipse ioFog 4
Eclipse Kura 4
USBX 4
Eclipse aeriOS 4
Eclipse Ditto 4
OpenJ9 4
Eclipse ThreadX - USBX 4
Mosquitto 4
Eclipse OMR 4
org.eclipse.jetty:jetty-security 3
Eclipse Connected Services Platform 3
Eclipse Mnestix 3
Eclipse Open VSX 3
Eclipse Che 3
Eclipse BaSyx Helm Charts 2
Open J9 2
Eclipse Langium 2
NextX Duo 2
org.eclipse.jetty.ee11:jetty-ee11-servlet 2
org.eclipse.jetty.ee10:jetty-ee10-servlet 2
org.eclipse.jetty.ee9:jetty-ee9-security 2
org.eclipse.jetty.ee8:jetty-ee8-security 2
Eclipse Mojarra 2
GUIX 2
otterdog 2
2 results · Clear filters · Feed
-
High 8.7CVE-2026-102718 Public exploit
Out-of-bounds read in the NetX Duo SNMP OID parser via a multi-byte BER length
In Eclipse ThreadX NetX Duo versions up to and including 6.5.2.202603, the SNMP agent's OID parser uses a multi-byte BER length from the request without checking it against the bytes present, and reads past the end of the packet buffer. A remote, unauthentica…
-
High 7.4CVE-2026-2332 Public exploit
HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * https://w4ke.info/2025/06/18/funky-chunks.html * https://w4ke.info/2025/10/29/funky-chunks-2.htm…