Advisories · Technology

Eclipse Foundation Eclipse Che.

Every CVE that names Eclipse Foundation Eclipse Che among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-114278 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Unauthenticated Command Injection via kubeconfig Username in che-machine-exec
- Eclipse Foundation Eclipse Che
- Command injection
Not analysed yet 28 Oct 2026
CVE-2026-86671 CVE record

CVSS 8.4 High

Server-side request forgery in Eclipse Foundation Eclipse Che
- Eclipse Foundation Eclipse Che
- Path traversal
- Hard-coded credentials
Not analysed yet 5 Oct 2026
CVE-2026-86590 CVE record

CVSS 6.3 Medium

Server-side request forgery in Eclipse Foundation Eclipse Che
- Eclipse Foundation Eclipse Che
- Server-side request forgery (SSRF)
Not analysed yet 8 Sept 2026