Eclipse Arrowhead (Eclipse Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-03. Vendor: Eclipse Foundation.

CVEs of Eclipse Arrowhead

• CVE-2026-80515 - CVSS 8.9 (high), 2026-09-03: In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whether to apply its…
• CVE-2026-82180 - CVSS 9.5 (critical), 2026-09-03: In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFilter parses an…