E
Eclipse
Security Risk Profile
48
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 371 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 31, 2009 to present
371
Total CVEs
205
Critical+High
1
Exploited
115
Unpatched
Threat Assessment
Avg CVSS
7.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
115
Critical/High
Risk Level
48/100
medium
⚠️ 1 Active Exploits⚡ 1 Zero-Days🆕 6Fresh (<7d)📈 12 in Last 30 Days
Severity Distribution
Critical
66High
139Medium
141Low
11Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
30Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
26
2
XSS
23
3
Infoleak
21
4
Buffer Overflow
20
5
Input Validation
19
Most Affected Products
1. Eclipse Jetty603
2. Mortbay Jetty123
3. Debian Debian Linux56
4. redhat/jetty45
5. Eclipse Eclipse IDE42
Recent Vulnerabilities
See more →CVE-2026-18662
unknown
Oct 15, 2026🔧 No Patch
CVE-2026-19864
unknown
Oct 15, 2026🔧 No Patch
CVE-2026-18660
unknown
Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames
Oct 15, 2026🔧 No Patch
CVE-2026-18661
unknown
Oct 15, 2026🔧 No Patch
CVE-2026-76184
unknown
Oct 15, 2026🔧 No Patch
CVE-2026-76182
unknown
Oct 15, 2026🔧 No Patch
CVE-2026-107503
CVSS 7.1high
Oct 8, 2026🔧 No Patch
CVE-2026-86671
CVSS 8.4high
Oct 5, 2026🔧 No Patch
CVE-2026-102717
CVSS 7.5high
MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash
Sep 30, 2026🔧 No Patch
CVE-2026-95842
CVSS 8.7EPSS 0%high
Moquette uncaught MQTT command exceptions can terminate shared session event loops
Sep 23, 2026
Monitor Eclipse in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.