Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-15075

AI Predicted 7.4 Difficulty: Easy EPSS 0.14% · P4

Possible ATT&CK Techniques 1AI

T1005 · Data from Local System

Affected Version Matrix 2

VendorProductVersion RangeStatus
Eclipse FoundationEclipse Vert.x4.0.0≤ 4.5.29affected
5.0.0≤ 5.1.4affected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-15075

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirects. Only Content-Length is stripped; no origin comparison (scheme, host, port) is performed before copying headers to the redirect target. As a result, credential headers, including Authorization, Cookie, Proxy-Authorization, and arbitrary custom headers such as X-API-Token, are forwarded to the redirect destination without the caller's knowledge. An attacker who can cause a Vert.x HttpClient to issue a request that is redirected to an attacker-controlled host (for example, by supplying a URL to a webhook dispatcher, image proxy, or microservice URL fetcher) can capture bearer tokens, basic-auth credentials, session cookies, and API keys attached to the original request.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Eclipse vert.x 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Eclipse vert.x是美国Eclipse基金会开源的一个反应式应用开发框架。 Eclipse vert.x 4.5.29及之前版本和5.1.4及之前版本存在安全漏洞，该漏洞源于DefaultRedirectHandler (vertx-core)在跨域HTTP 30x重定向时传播所有请求标头，仅剥离Content-Length，未进行源比较，导致凭证标头（包括Authorization、Cookie、Proxy-Authorization及自定义标头）被转发到重定向目标，可能使攻击者捕获原始请求中
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
Eclipse FoundationEclipse Vert.x 4.0.0 ~ 4.5.29 -

II. Public POCs for CVE-2026-15075

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-15075

请登录查看更多情报信息。

Other References for CVE-2026-15075 (1)

Same Patch Batch · Eclipse Foundation · 2026-07-14 · 10 CVEs total

CVE-2026-578989.0 CRITICALEclipse BaSyx Java Server SDK 路径遍历漏洞
CVE-2024-77087.5 HIGHEclipse Jetty 资源管理错误漏洞
CVE-2026-126066.3 MEDIUMEclipse Glassfish 输入验证错误漏洞
CVE-2026-67905.3 MEDIUMEclipse Jetty 输入验证错误漏洞
CVE-2026-83845.3 MEDIUMEclipse jetty 授权问题漏洞
CVE-2026-136994.3 MEDIUMDatabroker 0.6.1 PublishValue missing data_point panic
CVE-2026-15076Eclipse Vert.x 输入验证错误漏洞
CVE-2026-9561Eclipse kura 输入验证错误漏洞
CVE-2026-10051Eclipse Jetty 信息泄露漏洞

IV. Related Vulnerabilities

Same product: Eclipse Vert.x
Same vendor: Eclipse Foundation
Same weakness: CWE-200

V. Comments for CVE-2026-15075

No comments yet

Leave a comment