Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-112186

Quick assessment

Affected
Eclipse Foundation Eclipse Kura
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Eclipse Kura 5.4.0 至 5.6.2 版本中，Service Listing V1 REST API 会将每个请求的 JSON 请求体全部加载到内存中，且未对请求体大小设置任何限制。这些端点会在验证调用者身份之前先解析请求体。因此，没有有效凭证的远程攻击者可以同时发送数十个大尺寸的 JSON 请求，耗尽 Java 堆内存并触发 ，从而导致拒绝服务（DoS）。同样地，远程攻击者还可发送深度嵌套的 JSON 请求，因 Service Listing V1 中存在无限制的递归调用而触发 。

CVSS 8.7 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-112186

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In Eclipse Kura versions 5.4.0 through 5.6.2, the Service Listing V1 REST API read the JSON body of every request into memory, with no limit on its size. The endpoints parse the body before they check whether the caller is authenticated. A remote attacker without valid credentials can therefore send a few dozen large JSON requests at the same time, exhaust the Java heap with an `OutOfMemoryError`, and cause a denial of service. Likewise, a remote attacker, can send a deeply nested JSON request and trigger a `StackOverflowError` because of an unbound recursion in Service Listing V1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L
Source: CVE Program / CVE List V5
Vulnerability Type
不正确的行为次序
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Eclipse Foundation Eclipse Kura 5.4.0 ~ 5.6.2 -

II. Public POCs for CVE-2026-112186

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-112186

请登录查看更多情报信息。

Other References for CVE-2026-112186 (2)

Same Patch Batch · Eclipse Foundation · 2026-11-10 · 9 CVEs total

CVE-2026-97891 8.8 HIGH Eclipse Kura 5.0.0-5.6.2 认证会话耗尽漏洞
CVE-2026-112191 8.6 HIGH Eclipse Kura 5.4.0-5.6.2 权限绕过漏洞
CVE-2026-112185 8.6 HIGH Eclipse Kura 5.1.0-5.6.2 配置 API 权限绕过漏洞
CVE-2026-113422 7.7 HIGH Eclipse Kura 5.0.0-5.6.2 Wire Graph 权限提升漏洞
CVE-2026-97401 7.4 HIGH Kura 5.6.2 及以下版本存在命令执行漏洞
CVE-2026-114359 7.0 HIGH Eclipse Kura 远程下载及上传无限制导致拒绝服务
CVE-2026-111729 7.0 HIGH Kura<=5.6.2 文件上传处理程序目录穿越漏洞
CVE-2026-97402 2.3 LOW Eclipse Kura 3.1.0-5.6.2 蓝牙解析死循环拒绝服务漏洞

IV. Related Vulnerabilities

Same product: Eclipse Kura
Same vendor: Eclipse Foundation
Same weakness: CWE-696