# Eclipse Vert.x vulnerabilities Source: https://junglewise.ai/threats/technologies/eclipse-vert-x Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/eclipse-vert-x.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 16 vulnerabilities in Eclipse Vert.x: 0 in the last 7 days and 15 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-118487, was published on 3 November 2026. 15 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 15 - Last 90 days: 15 - All time: 16 (0 critical, 0 exploited in the wild) ## About Eclipse Vert.x Eclipse-based polyglot event-driven application framework for building reactive systems on the JVM. ## Latest Eclipse Vert.x vulnerabilities - [CVE-2026-118487: Eclipse Vert.x STOMP FrameParser heap exhaustion](https://junglewise.ai/threats/cve-2026-118487-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-the) (high, CVSS 7.5, published 3 Nov 2026) - [CVE-2026-118489: Eclipse Vert.x CachingWebClient cross-user cache disclosure](https://junglewise.ai/threats/cve-2026-118489-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-when-one) (high, CVSS 7.5, published 3 Nov 2026) - [CVE-2026-103223: Eclipse Vert.x PostgreSQL client unbounded memory allocation](https://junglewise.ai/threats/cve-2026-103223-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102477: Eclipse Vert.x gRPC compression bomb denial of service](https://junglewise.ai/threats/cve-2026-102477-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102469: Eclipse Vert.x DB2 client unsafe Java deserialization in UDT handling](https://junglewise.ai/threats/cve-2026-102469-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102466: Eclipse Vert.x MySQL client denial of service via uncapped column count](https://junglewise.ai/threats/cve-2026-102466-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102464: Eclipse Vert.x MQTT unbounded inbound QoS 2 message retention](https://junglewise.ai/threats/cve-2026-102464-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102463: Eclipse Vert.x PostgreSQL client unbounded array allocation denial of service](https://junglewise.ai/threats/cve-2026-102463-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102462: Eclipse Vert.x MSSQL client denial of service in TDS message decoder](https://junglewise.ai/threats/cve-2026-102462-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102461: Eclipse Vert.x denial of service in JSON Schema uniqueItems validation](https://junglewise.ai/threats/cve-2026-102461-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (info, published 15 Oct 2026) - [CVE-2026-102475: Eclipse Vert.x HTTP proxy body transformer heap exhaustion](https://junglewise.ai/threats/cve-2026-102475-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102467: Eclipse Vert.x WebSocket decompression denial of service](https://junglewise.ai/threats/cve-2026-102467-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102465: Eclipse Vert.x Redis client heap exhaustion in RESP parser](https://junglewise.ai/threats/cve-2026-102465-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102479: Eclipse Vert.x HTTP/1.x decoder request smuggling via header canonicalization](https://junglewise.ai/threats/cve-2026-102479-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0) (info, published 14 Oct 2026) - [CVE-2026-102476: Eclipse Vert.x HTTP client SSL context cache key insufficiency](https://junglewise.ai/threats/cve-2026-102476-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0) (info, published 14 Oct 2026) - [CVE-2026-6860: Eclipse Vert.x DoS via unbounded SNI SslContext cache growth](https://junglewise.ai/threats/cve-2026-6860-eclipse-vert-x-dos-via-unbounded-sni-sslcontext-cache-growth) (medium, CVSS 5.3, published 6 May 2026) ## Most severe Eclipse Vert.x vulnerabilities - [CVE-2026-118487: Eclipse Vert.x STOMP FrameParser heap exhaustion](https://junglewise.ai/threats/cve-2026-118487-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-the) (high, CVSS 7.5, published 3 Nov 2026) - [CVE-2026-118489: Eclipse Vert.x CachingWebClient cross-user cache disclosure](https://junglewise.ai/threats/cve-2026-118489-in-eclipse-vert-x-versions-4-0-0-4-5-35-or-5-0-0-5-2-2-when-one) (high, CVSS 7.5, published 3 Nov 2026) - [CVE-2026-102469: Eclipse Vert.x DB2 client unsafe Java deserialization in UDT handling](https://junglewise.ai/threats/cve-2026-102469-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-103223: Eclipse Vert.x PostgreSQL client unbounded memory allocation](https://junglewise.ai/threats/cve-2026-103223-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102477: Eclipse Vert.x gRPC compression bomb denial of service](https://junglewise.ai/threats/cve-2026-102477-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102462: Eclipse Vert.x MSSQL client denial of service in TDS message decoder](https://junglewise.ai/threats/cve-2026-102462-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102464: Eclipse Vert.x MQTT unbounded inbound QoS 2 message retention](https://junglewise.ai/threats/cve-2026-102464-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102463: Eclipse Vert.x PostgreSQL client unbounded array allocation denial of service](https://junglewise.ai/threats/cve-2026-102463-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102466: Eclipse Vert.x MySQL client denial of service via uncapped column count](https://junglewise.ai/threats/cve-2026-102466-in-eclipse-vert-x-versions-4-0-0-4-5-34-or-5-0-0-5-0-12-or-5-1-0) (medium, CVSS 5.9, published 15 Oct 2026) - [CVE-2026-102475: Eclipse Vert.x HTTP proxy body transformer heap exhaustion](https://junglewise.ai/threats/cve-2026-102475-in-eclipse-vert-x-versions-5-0-0-5-0-12-or-5-1-0-5-1-9-or-5-2-0) (medium, CVSS 5.9, published 15 Oct 2026) ## Vulnerabilities per week 15 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 13 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 2 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Eclipse technologies - [Eclipse ThreadX](https://junglewise.ai/threats/technologies/threadx): 18 vulnerabilities - [Eclipse Threadx Netx Duo](https://junglewise.ai/threats/technologies/threadx-netx-duo): 16 vulnerabilities - [Eclipse Kura](https://junglewise.ai/threats/technologies/eclipse-kura): 9 vulnerabilities - [Eclipse Milo](https://junglewise.ai/threats/technologies/milo): 6 vulnerabilities - [Eclipse Threadx Usbx](https://junglewise.ai/threats/technologies/threadx-usbx): 6 vulnerabilities - [Eclipse Openj9](https://junglewise.ai/threats/technologies/openj9): 5 vulnerabilities - [Eclipse Ankaios](https://junglewise.ai/threats/technologies/ankaios): 4 vulnerabilities - [Eclipse Che](https://junglewise.ai/threats/technologies/che): 4 vulnerabilities - [Eclipse Jetty](https://junglewise.ai/threats/technologies/eclipse-jetty): 3 vulnerabilities - [Eclipse NetX Duo](https://junglewise.ai/threats/technologies/eclipse-netx-duo): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Eclipse Vert.x vulnerabilities", https://junglewise.ai/threats/technologies/eclipse-vert-x, 11 November 2026.