Known vulnerabilities in Eclipse Foundation Eclipse ioFog
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-115216 | Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials | 9.1 Critical | Oct 27, 2026 |
| CVE-2026-113620 | In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do… | 9.8 Critical | Oct 20, 2026 |