Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-112185

Quick assessment

Affected
Eclipse Foundation Eclipse Kura
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Eclipse Kura 5.1.0 至 5.6.2 版本中，配置 REST API v2（org.eclipse.kura.rest.configuration.provider）未对 UserAdmin 持久化组件的配置访问实施限制，未要求访问者必须持有 权限。因此，任何仅持有 权限的已认证身份均可读取所有身份（包括管理员）的密码哈希值；这些哈希值以未加盐的 SHA-256 摘要形式存储。此外，该身份还可修改用户身份及其权限分配，并恢复先前的配置快照，从而能够提升至完全的管理员权限。该问题已在 Eclips

CVSS 8.6 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-112185

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In Eclipse Kura versions 5.1.0 through 5.6.2, the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) does not restrict access to the configuration of the UserAdmin persistence component to identities holding the kura.admin permission. An authenticated identity holding only the rest.configuration permission can read the password hashes of all identities, including administrators, which are stored as unsalted SHA-256 digests. The same identity can also modify identities and permission assignments, and restore previous configuration snapshots, which allows escalation to full administrative privileges. The issue is fixed in Eclipse Kura 5.6.3.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制不正确
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Eclipse Foundation Eclipse Kura 5.1.0 ~ 5.6.2 -

II. Public POCs for CVE-2026-112185

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-112185

请登录查看更多情报信息。

Other References for CVE-2026-112185 (2)

Same Patch Batch · Eclipse Foundation · 2026-11-10 · 9 CVEs total

CVE-2026-97891 8.8 HIGH Eclipse Kura 5.0.0-5.6.2 认证会话耗尽漏洞
CVE-2026-112186 8.7 HIGH Eclipse Kura 5.4.0-5.6.2 拒绝服务漏洞
CVE-2026-112191 8.6 HIGH Eclipse Kura 5.4.0-5.6.2 权限绕过漏洞
CVE-2026-113422 7.7 HIGH Eclipse Kura 5.0.0-5.6.2 Wire Graph 权限提升漏洞
CVE-2026-97401 7.4 HIGH Kura 5.6.2 及以下版本存在命令执行漏洞
CVE-2026-114359 7.0 HIGH Eclipse Kura 远程下载及上传无限制导致拒绝服务
CVE-2026-111729 7.0 HIGH Kura<=5.6.2 文件上传处理程序目录穿越漏洞
CVE-2026-97402 2.3 LOW Eclipse Kura 3.1.0-5.6.2 蓝牙解析死循环拒绝服务漏洞

IV. Related Vulnerabilities

Same product: Eclipse Kura
Same vendor: Eclipse Foundation
Same weakness: CWE-863