What’s Vulnerable › Products

Eclipse Foundation Eclipse ioFog vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Eclipse Foundation Eclipse ioFog version is affected

Latest Eclipse Foundation Eclipse ioFog vulnerabilities

• CVE-2026-113644 — iofogctl command injection via Controller provisioning response (CVSS 5.5)
• CVE-2026-115216 — Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials (CVSS 9.1)
• CVE-2026-113620 — Eclipse ioFog operator WebSocket accepts an unverified JWT (CVSS 9.8)
• CVE-2026-113619 — Eclipse ioFog renders request templates before authentication (CVSS 7.5)