Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-15075

Quick assessment

Affected

Eclipse Foundation Eclipse Vert.x

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Eclipse vert.x是美国Eclipse基金会开源的一个反应式应用开发框架。 Eclipse vert.x 4.5.29及之前版本和5.1.4及之前版本存在安全漏洞，该漏洞源于DefaultRedirectHandler (vertx-core)在跨域HTTP 30x重定向时传播所有请求标头，仅剥离Content-Length，未进行源比较，导致凭证标头（包括Authorization、Cookie、Proxy-Authorization及自定义标头）被转发到重定向目标，可能使攻击者捕获原始请求中

AI Predicted 7.4 Difficulty: Easy EPSS 0.20% · P9 Updated Jul 14, 2026

Possible ATT&CK Techniques 1 AI

T1005 · Data from Local System

Affected Version Matrix 2

Vendor	Product	Version Range	Status
Eclipse Foundation	Eclipse Vert.x	`4.0.0≤ 4.5.29`	affected
		`5.0.0≤ 5.1.4`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-15075

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

In Eclipse Vert.x versions up to and including 4.5.29 (4.x branch) and 5.1.4 (5.x branch), DefaultRedirectHandler (vertx-core) propagates all request headers as-is across cross-origin HTTP 30x redirects. Only Content-Length is stripped; no origin comparison (scheme, host, port) is performed before copying headers to the redirect target. As a result, credential headers, including Authorization, Cookie, Proxy-Authorization, and arbitrary custom headers such as X-API-Token, are forwarded to the redirect destination without the caller's knowledge. An attacker who can cause a Vert.x HttpClient to issue a request that is redirected to an attacker-controlled host (for example, by supplying a URL to a webhook dispatcher, image proxy, or microservice URL fetcher) can capture bearer tokens, basic-auth credentials, session cookies, and API keys attached to the original request.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Source: CVE Program / CVE List V5

Vulnerability Type

信息暴露

Source: CVE Program / CVE List V5

Vulnerability Title

Eclipse vert.x 信息泄露漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Eclipse Foundation	Eclipse Vert.x	4.0.0 ~ 4.5.29	-

II. Public POCs for CVE-2026-15075

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-15075

请登录查看更多情报信息。

Other References for CVE-2026-15075 (1)

🔗 Not found

https://www.cve.org/CVERecord?id=CVE-2026-15075

Same Patch Batch · Eclipse Foundation · 2026-07-14 · 10 CVEs total

CVE-2026-57898	9.0 CRITICAL	Eclipse BaSyx Java Server SDK 路径遍历漏洞
CVE-2024-7708	7.5 HIGH	Eclipse Jetty 资源管理错误漏洞
CVE-2026-12606	6.3 MEDIUM	Eclipse Glassfish 输入验证错误漏洞
CVE-2026-6790	5.3 MEDIUM	Eclipse Jetty 输入验证错误漏洞
CVE-2026-8384	5.3 MEDIUM	Eclipse jetty 授权问题漏洞
CVE-2026-13699	4.3 MEDIUM	Databroker 0.6.1 PublishValue missing data_point panic
CVE-2026-15076		Eclipse Vert.x 输入验证错误漏洞
CVE-2026-9561		Eclipse kura 输入验证错误漏洞
CVE-2026-10051		Eclipse Jetty 信息泄露漏洞

IV. Related Vulnerabilities

Same product: Eclipse Vert.x

Same vendor: Eclipse Foundation

Same weakness: CWE-200