Advisories · Technology

Eclipse Foundation Eclipse Ditto.

Every CVE that names Eclipse Foundation Eclipse Ditto among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-84197 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Improper certificate validation in Eclipse Foundation Eclipse Ditto
- Eclipse Foundation Eclipse Ditto
- Weak cryptography or TLS
- CWE-300
Not analysed yet 8 Sept 2026
CVE-2026-82958 CVE record

CVSS 7.6 High

Template injection in Eclipse Foundation Eclipse Ditto
- Eclipse Foundation Eclipse Ditto
- Other injection
- Code injection
Not analysed yet 2 Sept 2026
CVE-2026-84175 CVE record

CVSS 5.3 Medium

Server-side request forgery in Eclipse Foundation Eclipse Ditto
- Eclipse Foundation Eclipse Ditto
- Denial of service
- Server-side request forgery (SSRF)
Not analysed yet 2 Sept 2026