Products: 105
    Vulnerabilities: 441
    Known Exploited: 0
    53
    Critical Level Threats
    132
    High Level Threats
    130
    Medium Level Threats
    11
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-114278

    Unauthenticated Command Injection via kubeconfig Username in che-machine-exec

    Last Modified: Oct 28, 2026
    Published: Oct 28, 2026

    CVE-2026-115408

    ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets

    Last Modified: Oct 28, 2026
    Published: Oct 27, 2026

    CVE-2026-113644

    iofogctl command injection via Controller provisioning response

    Last Modified: Oct 27, 2026
    Published: Oct 27, 2026

    CVE-2026-115216

    Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials

    Last Modified: Oct 27, 2026
    Published: Oct 27, 2026

    CVE-2026-89320

    HmacShaCryptor.Hash never hashes its input — returns constant HMAC_K("") for all inputs, voiding CBC-HMAC JWE integrity

    Last Modified: Oct 26, 2026
    Published: Oct 23, 2026
    Items Per Page