CVE-2026-12609Suited to automated attack · CISA
Path traversal in Eclipse Foundation Eclipse Theia
CVSS score
7.5
EPSS probability
%1.6
Risk score
0.1
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Eclipse Theia - Unauthenticated Path Traversal
Makefile Go / Python
Similar Vulnerabilities
7.5
CVE-2026-110723
Vulnerability in Eclipse Foundation Eclipse Connected Services Platform
EF
Patch status unknown
6.5
CVE-2026-110726
Resource allocation without limits in Eclipse Foundation Eclipse Connected Services Platform
EF
Patch status unknown
7.4
CVE-2026-2332
HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
EF
Patch verifiedEPSS %1
7.5
CVE-2021-34432
Improper input validation in Eclipse Mosquitto
E
Patch verifiedEPSS %1
7.5
CVE-2026-6918
Out-of-bounds read in Eclipse Openj9
E
Patch verified Public Exploits:1EPSS %1
9.1
CVE-2026-2586
Code injection in Eclipse Glassfish
E
Patch status unknown Public Exploits:1EPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-12609"