Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Eclipse ioFog 3.9.2 Clear all filters
TI-2026-81134 CVE-2026-113644 · GHSA-w6f9-5453-8p69

Command injection in Eclipse ioFog iofogctl via provisioning response

Priority MEDIUM 58

In Eclipse ioFog iofogctl versions 1.0.0 through 3.7.0 and 3.8.0-rc.1 through 3.9.1, the provisioning key and CA certificate returned by the Controller API are concatenated into shell commands (`edgelet provision` and `e…

CVSS 4.0MEDIUM 5.5 Network No auth User interaction EPSS 0.00183 Published 2026-10-27 Fixed in 3.9.2 CWE-78
TI-2026-81135 CVE-2026-115216 · GHSA-mvpf-rh77-cjfw

Certificate verification disabled in Eclipse ioFog Operator

Priority HIGH 72

In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the Controller API and when it logs in to an external OIDC issuer.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00236 Published 2026-10-27 Fixed in 3.9.2 CWE-295