Skip to content

XFEDI

Conversation

ActivityPub

OffSequence@[email protected]

CVE-2026-115216 – Eclipse ioFog Operator (3.8.0 – <3.9.2) has CRITICAL improper TLS cert validation (CWE-295), allowing attackers to intercept OAuth secrets & admin passwords. Upgrade to 3.9.2 to mitigate. https://radar.offseq.com/threat/cve-2026-115216-cwe-295-improper-certificate-validation-in-eclipse-foundation-eclipse-iofog-e8964354e78c9553 #OffSeq #CVE2026115216 #Eclipse #TLS #infosec

Critical threat: CVE-2026-115216: CWE-295 Improper Certificate Validation in Eclipse Foundation Eclipse ioFog

OffSeq Threat RadarCVE-2026-115216: Eclipse ioFog · Improper Certificate Validation | Threat RadarCritical severity, CVSS 9.1: In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the…

↩ Reply ♡ 0 · ↻ 0 ↗ Original

Oct 27, 2026 · 12:00 UTC

Replies

No replies here yet.