Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-84175

Quick assessment

Affected
Eclipse Foundation Eclipse Ditto
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Eclipse Ditto是美国Eclipse基金会的一款实现设备数字孪生的服务中间件。 Eclipse Ditto 3.0.0至3.9.6版本和启用WoT集成功能的2.4.0至2.5.x版本存在安全漏洞，该漏洞源于Things服务从API用户提供的URL获取WoT ThingModel时未验证目标主机，且跟随HTTP重定向时未重新验证重定向目标并无跳数限制，可能导致经过身份验证的用户发起来自部署网络内部的任意HTTP GET请求（包括云实例元数据端点和内部服务），并利用返回的错误响应枚举内部服务。

CVSS 5.3 · Medium EPSS 0.40% · P33

Affected Version Matrix 3

VendorProduct Version RangeStatus
Eclipse Foundation Eclipse Ditto 3.9.0≤ 3.9.6 affected
3.0.0≤ 3.8.12 affected
2.4.0< 3.0.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-84175

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing or Feature, without validating the target host, and follows HTTP redirects without re-validating the redirect target and without a hop limit. An authenticated user who is permitted to create a Thing, or who holds WRITE permission on an existing Thing, can thereby cause the Things service to issue arbitrary HTTP GET requests from inside the deployment's network — including to cloud instance-metadata endpoints and other internal services — and can use the differing error responses returned to the caller to enumerate internal services. Versions 2.4.0 to 2.5.x contain the same code, but are only affected where the operator explicitly enabled the WoT integration feature toggle, which is disabled by default in those versions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
Eclipse Ditto 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Eclipse Ditto是美国Eclipse基金会的一款实现设备数字孪生的服务中间件。 Eclipse Ditto 3.0.0至3.9.6版本和启用WoT集成功能的2.4.0至2.5.x版本存在安全漏洞，该漏洞源于Things服务从API用户提供的URL获取WoT ThingModel时未验证目标主机，且跟随HTTP重定向时未重新验证重定向目标并无跳数限制，可能导致经过身份验证的用户发起来自部署网络内部的任意HTTP GET请求（包括云实例元数据端点和内部服务），并利用返回的错误响应枚举内部服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Eclipse Foundation Eclipse Ditto 3.9.0 ~ 3.9.6 -

II. Public POCs for CVE-2026-84175

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-84175

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-84175 (2)

Same Patch Batch · Eclipse Foundation · 2026-09-02 · 3 CVEs total

CVE-2026-82955 9.0 CRITICAL Eclipse aeriOS 加密问题漏洞
CVE-2026-82958 7.6 HIGH Eclipse Ditto 输出处理不当漏洞

IV. Related Vulnerabilities

Same product: Eclipse Ditto
Same vendor: Eclipse Foundation
Same weakness: CWE-918

V. Comments for CVE-2026-84175

No comments yet

Leave a comment