CVE-2026-9158 — Eclipse Foundation / Eclipse 4diac

CVE-2026-9158

Eclipse Foundation / Eclipse 4diac PUBLISHED

Description (CNA)

In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a dangling pointer. This allows subsequent commands to access freed memory (use-after-free).

Affected (CNA)

Vendor / product	Versions
Eclipse Foundation / Eclipse 4diac	affected 3.0.0 through 3.1.0

CWE

CWE-416

References

https://gitlab.eclipse.org/security/cve-assignment/-/work_items/109

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.