Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:eclipse:iofog_controller:3.8.0:*:*:*:*:*:*:*

2 briefs RSS
critical advisory

Eclipse ioFog Controller: WebSocket Authentication Bypass (CVE-2026-113620)

Eclipse ioFog Controller versions 3.8.0 through 3.9.1 contain an authentication bypass vulnerability in operator WebSocket endpoints, allowing attackers to access exec and log sessions using self-minted bearer tokens.

PoC ioFog Controller authentication-bypass web-application-vulnerability cloud-edge
1t 1c
low advisory

Eclipse ioFog Controller: Denial of Service via Unauthenticated Liquid Template Processing (CVE-2026-113619)

An unauthenticated denial-of-service vulnerability in Eclipse ioFog Controller (versions 3.8.0 through 3.9.1) allows attackers to crash the controller process by sending malicious JSON payloads to template-processing routes.

ioFog Controller
1r 1c