What’s Vulnerable › Vulnerabilities

CVE-2026-9158

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-18 · updated 2026-10-26
• Weakness: CWE-416

Description

In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a dangling pointer. This allows subsequent commands to access freed memory (use-after-free).

Affected products

• Eclipse Foundation Eclipse 4diac: from 3.0.0 through 3.1.0

References

• https://gitlab.eclipse.org/security/cve-assignment/-/work_items/109

Get alerted when CVE-2026-9158 or the next vulnerability affects your stack