E
Eclipse Foundation
Security Risk Profile
60
/100
highSecurity Risk Score
Comprehensive risk assessment based on 68 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 5, 2009 to present
68
Total CVEs
7
Critical+High
1
Exploited
5
Unpatched
Threat Assessment
Avg CVSS
7.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
5
Critical/High
Risk Level
60/100
high
⚠️ 1 Active Exploits🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
3High
4Medium
15Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
CSRF
1
2
XSS
1
3
Integer Underflow
1
4
Buffer Overflow
1
Most Affected Products
1. Eclipse Foundation Temurin23
2. Eclipse Foundation Jetty22
3. Eclipse threadx NetX Duo9
4. Eclipse Foundation NetX Duo6
5. Eclipse Foundation ThreadX5
Recent Vulnerabilities
See more →CVE-2026-90882
CVSS 8.7high
Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user data
Sep 22, 2026🔧 No Patch
CVE-2026-58465
CVSS 8.7high
Eclipse Wakaama CoAP Block1 Handler Unbounded Memory Allocation DoS
Jul 2, 2026🔧 No Patch
CVE-2026-4983
CVSS 5.4medium
Jun 23, 2026🔧 No Patch
CVE-2026-46580
CVSS 8.4high
Jun 18, 2026
CVE-2026-44688
CVSS 8.4high
Jun 18, 2026
EOL-eclipse-temurin-26
unknown
Mar 23, 2026
https://www.bleepingcomputer.com/news/security/open-vsx-rotates-tokens-used-in-supply-chain-malware-attack/
unknown
Open VSX rotates access tokens used in supply-chain malware attack
Nov 2, 2025⚠ Exploited🔧 No Patch
CVE-2025-55086
CVSS 9.8critical
Oct 20, 2025🔧 No Patch
CVE-2025-55087
CVSS 6.3medium
Oct 17, 2025🔧 No Patch
CVE-2025-55100
CVSS 9.1critical
Potential out-of-bounds read in _ux_host_class_audio10_sam_parse_func()
Oct 17, 2025🔧 No Patch
Monitor Eclipse Foundation in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.