{"schema_version":1,"title":"Eclipse Vert.x vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 16 vulnerabilities in Eclipse Vert.x: 0 in the last 7 days and 15 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-118487, was published on 3 November 2026. 15 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/eclipse-vert-x","json_url":"https://junglewise.ai/threats/technologies/eclipse-vert-x.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/eclipse-vert-x","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":2,"all_time":16,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":15,"last_90_days":15,"last_365_days":16},"latest":[{"cve":"CVE-2026-118487","cvss":7.5,"slug":"cve-2026-118487-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-the","title":"Eclipse Vert.x STOMP FrameParser heap exhaustion","severity":"high","exploited":false,"published_at":"2026-11-03T16:17:19.89+00:00","url":"https://junglewise.ai/threats/cve-2026-118487-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-the"},{"cve":"CVE-2026-118489","cvss":7.5,"slug":"cve-2026-118489-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-when-one","title":"Eclipse Vert.x CachingWebClient cross-user cache disclosure","severity":"high","exploited":false,"published_at":"2026-11-03T15:17:24.78+00:00","url":"https://junglewise.ai/threats/cve-2026-118489-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-when-one"},{"cve":"CVE-2026-103223","cvss":5.9,"epss":0.0032,"slug":"cve-2026-103223-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x PostgreSQL client unbounded memory allocation","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.853+00:00","url":"https://junglewise.ai/threats/cve-2026-103223-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102477","cvss":5.9,"epss":0.0032,"slug":"cve-2026-102477-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x gRPC compression bomb denial of service","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.72+00:00","url":"https://junglewise.ai/threats/cve-2026-102477-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102469","cvss":5.9,"epss":0.0042,"slug":"cve-2026-102469-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x DB2 client unsafe Java deserialization in UDT handling","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.573+00:00","url":"https://junglewise.ai/threats/cve-2026-102469-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102466","cvss":5.9,"epss":0.0026,"slug":"cve-2026-102466-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x MySQL client denial of service via uncapped column count","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.427+00:00","url":"https://junglewise.ai/threats/cve-2026-102466-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102464","cvss":5.9,"epss":0.0028,"slug":"cve-2026-102464-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x MQTT unbounded inbound QoS 2 message retention","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.283+00:00","url":"https://junglewise.ai/threats/cve-2026-102464-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102463","cvss":5.9,"epss":0.0028,"slug":"cve-2026-102463-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x PostgreSQL client unbounded array allocation denial of service","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.143+00:00","url":"https://junglewise.ai/threats/cve-2026-102463-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102462","cvss":5.9,"epss":0.0032,"slug":"cve-2026-102462-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x MSSQL client denial of service in TDS message decoder","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.02+00:00","url":"https://junglewise.ai/threats/cve-2026-102462-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102461","epss":0.004,"slug":"cve-2026-102461-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x denial of service in JSON Schema uniqueItems validation","severity":"info","exploited":false,"published_at":"2026-10-15T09:17:14.887+00:00","url":"https://junglewise.ai/threats/cve-2026-102461-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102475","cvss":5.9,"epss":0.0026,"slug":"cve-2026-102475-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0","title":"Eclipse Vert.x HTTP proxy body transformer heap exhaustion","severity":"medium","exploited":false,"published_at":"2026-10-15T08:16:36.797+00:00","url":"https://junglewise.ai/threats/cve-2026-102475-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0"},{"cve":"CVE-2026-102467","cvss":5.9,"epss":0.0026,"slug":"cve-2026-102467-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x WebSocket decompression denial of service","severity":"medium","exploited":false,"published_at":"2026-10-15T08:16:36.67+00:00","url":"https://junglewise.ai/threats/cve-2026-102467-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102465","cvss":5.9,"epss":0.0021,"slug":"cve-2026-102465-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x Redis client heap exhaustion in RESP parser","severity":"medium","exploited":false,"published_at":"2026-10-15T08:16:36.54+00:00","url":"https://junglewise.ai/threats/cve-2026-102465-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102479","epss":0.0027,"slug":"cve-2026-102479-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0","title":"Eclipse Vert.x HTTP/1.x decoder request smuggling via header canonicalization","severity":"info","exploited":false,"published_at":"2026-10-14T19:17:05.313+00:00","url":"https://junglewise.ai/threats/cve-2026-102479-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0"},{"cve":"CVE-2026-102476","epss":0.0024,"slug":"cve-2026-102476-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0","title":"Eclipse Vert.x HTTP client SSL context cache key insufficiency","severity":"info","exploited":false,"published_at":"2026-10-14T18:17:17.503+00:00","url":"https://junglewise.ai/threats/cve-2026-102476-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0"},{"cve":"CVE-2026-6860","cvss":5.3,"epss":0.0031,"slug":"cve-2026-6860-eclipse-vert-x-dos-via-unbounded-sni-sslcontext-cache-growth","title":"Eclipse Vert.x DoS via unbounded SNI SslContext cache growth","severity":"medium","exploited":false,"published_at":"2026-05-06T10:16:26.293+00:00","url":"https://junglewise.ai/threats/cve-2026-6860-eclipse-vert-x-dos-via-unbounded-sni-sslcontext-cache-growth"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":13},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Eclipse ThreadX","slug":"threadx","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/threadx"},{"name":"Eclipse Threadx Netx Duo","slug":"threadx-netx-duo","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/threadx-netx-duo"},{"name":"Eclipse Kura","slug":"eclipse-kura","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/eclipse-kura"},{"name":"Eclipse Milo","slug":"milo","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/milo"},{"name":"Eclipse Threadx Usbx","slug":"threadx-usbx","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/threadx-usbx"},{"name":"Eclipse Openj9","slug":"openj9","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/openj9"},{"name":"Eclipse Ankaios","slug":"ankaios","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/ankaios"},{"name":"Eclipse Che","slug":"che","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/che"},{"name":"Eclipse Jetty","slug":"eclipse-jetty","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/eclipse-jetty"},{"name":"Eclipse NetX Duo","slug":"eclipse-netx-duo","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/eclipse-netx-duo"}],"technology":{"hub":true,"name":"Eclipse Vert.x","slug":"eclipse-vert-x","vendor":{"hub":true,"name":"Eclipse","slug":"eclipse","url":"https://junglewise.ai/threats/vendors/eclipse"},"aliases":[],"category":"framework","homepage":"https://vertx.io","description":"Eclipse-based polyglot event-driven application framework for building reactive systems on the JVM.","url":"https://junglewise.ai/threats/technologies/eclipse-vert-x"},"most_severe":[{"cve":"CVE-2026-118487","cvss":7.5,"slug":"cve-2026-118487-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-the","title":"Eclipse Vert.x STOMP FrameParser heap exhaustion","severity":"high","exploited":false,"published_at":"2026-11-03T16:17:19.89+00:00","url":"https://junglewise.ai/threats/cve-2026-118487-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-the"},{"cve":"CVE-2026-118489","cvss":7.5,"slug":"cve-2026-118489-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-when-one","title":"Eclipse Vert.x CachingWebClient cross-user cache disclosure","severity":"high","exploited":false,"published_at":"2026-11-03T15:17:24.78+00:00","url":"https://junglewise.ai/threats/cve-2026-118489-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-when-one"},{"cve":"CVE-2026-102469","cvss":5.9,"epss":0.0042,"slug":"cve-2026-102469-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x DB2 client unsafe Java deserialization in UDT handling","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.573+00:00","url":"https://junglewise.ai/threats/cve-2026-102469-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-103223","cvss":5.9,"epss":0.0032,"slug":"cve-2026-103223-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x PostgreSQL client unbounded memory allocation","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.853+00:00","url":"https://junglewise.ai/threats/cve-2026-103223-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102477","cvss":5.9,"epss":0.0032,"slug":"cve-2026-102477-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x gRPC compression bomb denial of service","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.72+00:00","url":"https://junglewise.ai/threats/cve-2026-102477-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102462","cvss":5.9,"epss":0.0032,"slug":"cve-2026-102462-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x MSSQL client denial of service in TDS message decoder","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.02+00:00","url":"https://junglewise.ai/threats/cve-2026-102462-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102464","cvss":5.9,"epss":0.0028,"slug":"cve-2026-102464-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x MQTT unbounded inbound QoS 2 message retention","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.283+00:00","url":"https://junglewise.ai/threats/cve-2026-102464-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102463","cvss":5.9,"epss":0.0028,"slug":"cve-2026-102463-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x PostgreSQL client unbounded array allocation denial of service","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.143+00:00","url":"https://junglewise.ai/threats/cve-2026-102463-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102466","cvss":5.9,"epss":0.0026,"slug":"cve-2026-102466-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0","title":"Eclipse Vert.x MySQL client denial of service via uncapped column count","severity":"medium","exploited":false,"published_at":"2026-10-15T09:17:15.427+00:00","url":"https://junglewise.ai/threats/cve-2026-102466-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0"},{"cve":"CVE-2026-102475","cvss":5.9,"epss":0.0026,"slug":"cve-2026-102475-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0","title":"Eclipse Vert.x HTTP proxy body transformer heap exhaustion","severity":"medium","exploited":false,"published_at":"2026-10-15T08:16:36.797+00:00","url":"https://junglewise.ai/threats/cve-2026-102475-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0"}],"generated_at":"2026-11-11T03:07:00.183524+00:00"}