https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving Eclipse Foundation.Wed, 04 Nov 2026 23:52:43 GMThttps://seclists.org/oss-sec/2026/q4/426cst-11669CVE-2026-102479 is a request smuggling vulnerability in Eclipse Vert.x HTTP/1.x decoder with a CVSS score of 8.7. The vulnerability affects vertx-core across three minor release branches, though the exploitation window is limited. A security advisory and technical analysis from JFrog document the flaw and its potential attack vectors. Sources: oss-security.Wed, 28 Oct 2026 18:14:55 GMThttps://cisa.gov/news-events/ics-advisories/icsa-26-288-01cst-10423The Eclipse Foundation released a security advisory for Eclipse Milo versions 0.6.0 through 1.1.4 covering six vulnerabilities spanning authorization bypass, denial of service, credential exposure, and memory exhaustion. The vulnerabilities affect industrial control system (ICS) deployments in chemical, critical manufacturing, energy, water, and wastewater sectors. Eclipse Milo 1.1.5 addresses all issues, though users on version 0.6.x must migrate to 1.1.5 or later as no patched 0.6.x releases exist. Sources: CISA ICS Advisories.Thu, 15 Oct 2026 12:00:00 GMThttps://advisories.ncsc.nl/advisory?id=NCSC-2026-0377cst-7521Oracle patched seven vulnerabilities across Oracle Enterprise Manager products, including Enterprise Manager Base Platform, Enterprise Manager for Fusion Middleware, and Enterprise Manager for Oracle Database. Three of the vulnerabilities (CVE-2026-41635, CVE-2026-83355, and CVE-2026-2332) carry critical severity ratings with CVSS scores of 9.1 or higher; five vulnerabilities can be exploited remotely without authentication and may lead to unauthorized access, data modification, or system unavailability. Sources: NCSC Netherlands Advisories.Wed, 16 Sep 2026 13:54:07 GMT