CVE-2026-115216

Vendor

Eclipse Foundation

Product

Eclipse ioFog

CVSS v4.0

9.1 AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-295

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 18
   CVE NVD 7d ago

   In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the Controller API and…

   In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the Controller API and when it logs in to an external OIDC issuer. An on-path attacker can present any…

   CVSS 9.1 CVE-2026-115216 Eclipse Foundation