5.2
Medium
CVE-2026-9158 In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management…
Description
In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a dangling pointer. This allows subsequent commands to access freed memory (use-after-free).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Eclipse 4diac 3.0 | 3.0.0 → 3.1.0 | No fix stated |