Known Vulnerabilities for Kura by Eclipse
Listed below are 5 of the newest known vulnerabilities associated with "Kura" by "Eclipse".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114359 json | Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives. A m... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-113422 json | In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the Wire Service RE... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-112191 json | In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs (identity/v1, and identity/v2 since 5.5.0, provided by o... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-112186 json | In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-112185 json | In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) do... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-111729 json | In Kura versions <= 5.6.2, the "Command" file-upload handler at `POST /admin/denali/file/command` extracts a client-supplied ... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-97891 json | In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in authen... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-97402 json | In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the AD-structure leng... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-97401 json | In Kura versions <= 5.6.2, `CommandCloudApp.execute()` extracts a caller-supplied ZIP archive into a caller-supplied director... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-9561 json | Not Provided | 2026-07-14 | 2026-10-24 |