Eclipse Kuksa - Databroker (Eclipse Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-07-14. Vendor: Eclipse Foundation.

CVEs of Eclipse Kuksa - Databroker

• CVE-2026-13699 - CVSS 6.5 (medium), 2026-07-14: In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional data_point field…
• CVE-2026-6272 - CVSS 8.5 (high), 2026-04-24: A client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStream API by sending…