Eclipse Basyx (Eclipse Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-05-05. Vendor: Eclipse Foundation.

CVEs of Eclipse Basyx

• CVE-2026-7411 - CVSS 10 (critical), 2026-05-05: In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote…
• CVE-2026-7412 - CVSS 8.6 (high), 2026-05-05: In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated…