Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-84175

Quick assessment

Affected
Eclipse Foundation Eclipse Ditto
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Eclipse Ditto 的 3.0.0 至 3.9.6 版本中，Things 服务会通过 HTTP 从 API 用户在 Thing 或 Feature 的 字段中提供的 URL 获取 WoT（Web of Things）ThingModel，但该服务未对目标主机进行验证，且在跟随 HTTP 重定向时也不会重新验证重定向目标地址，同时缺少重定向跳数限制。因此，任何具备创建 Thing 权限、或拥有现有 Thing 的 WRITE 权限的已认证用户，可以促使 Things 服务从部署环境的内部网络发起任意的 H

CVSS 5.3 · Medium
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-84175

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without validating the target host, and follows HTTP redirects without re-validating the redirect target and without a hop limit. An authenticated user who is permitted to create a Thing, or who holds WRITE permission on an existing Thing, can thereby cause the Things service to issue arbitrary HTTP GET requests from inside the deployment's network — including to cloud instance-metadata endpoints and other internal services — and can use the differing error responses returned to the caller to enumerate internal services. Versions 2.4.0 to 2.5.x contain the same code, but are only affected where the operator explicitly enabled the WoT integration feature toggle, which is disabled by default in those versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Eclipse Foundation Eclipse Ditto 3.9.0 ~ 3.9.6 -

II. Public POCs for CVE-2026-84175

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-84175

请登录查看更多情报信息。

Other References for CVE-2026-84175 (2)

IV. Related Vulnerabilities

Same product: Eclipse Ditto
Same vendor: Eclipse Foundation
Same weakness: CWE-918

V. Comments for CVE-2026-84175

No comments yet

Leave a comment