CVE WATCH / VULNERABILITY DETAIL
CVE-2026-114359
UNKNOWNCVSS 0NVD feed
Published 10 November 2026 · tracked since 11 November 2026
Description
Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives. A malicious or compromised HTTP(S) server, or an attacker able to tamper with a plain-HTTP download, can stream an arbitrarily large (or endless) response. Kura writes the respon
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-125754 HIGH 7.1
- CVE-2026-125753 MEDIUM 5.9
- CVE-2026-125747 MEDIUM 5.4
- CVE-2026-124038 LOW 2.3
- CVE-2026-123181 MEDIUM 5.5
- CVE-2026-123179 MEDIUM 5.5
- CVE-2026-121683 CRITICAL 9.4
- CVE-2026-121653 CRITICAL 9.8
- CVE-2026-111256
- CVE-2026-111250