Advisories · Technology

Eclipse Foundation.

Every CVE that names Eclipse Foundation among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18659 CVE record

CVSS 6.9 Medium

Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring
- Eclipse Foundation
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-18662 CVE record

CVSS 6.9 Medium

Incorrect authorization in Eclipse Foundation
- Eclipse Foundation
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-19864 CVE record

CVSS 5.6 Medium

Cleartext storage of sensitive information in Eclipse Foundation
- Eclipse Foundation
- Information disclosure
Not analysed yet 15 Oct 2026
CVE-2026-19863 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Authentication bypass in Eclipse Foundation
- Eclipse Foundation
- Authentication bypass
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-18660 CVE record

CVSS 8.8 High

Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames
- Eclipse Foundation
- Server-side request forgery (SSRF)
- CWE-178
Not analysed yet 15 Oct 2026
CVE-2026-18661 CVE record

CVSS 8.8 High

Incorrect authorization in Eclipse Foundation
- Eclipse Foundation
- Broken access control
Not analysed yet 15 Oct 2026