| CVE-2026-113644 |
iofogctl command injection via Controller provisioning response
|
5.5
Medium
|
Oct 27, 2026 |
| CVE-2026-115216 |
Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials
|
9.1
Critical
|
Oct 27, 2026 |
| CVE-2026-113620 |
In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do…
|
9.8
Critical
|
Oct 20, 2026 |
| CVE-2026-113619 |
In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template…
|
7.5
High
|
Oct 20, 2026 |