Server-Side Request Forgery

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, the Operation Delegation feature fails to validate the destination URI of delegated requests. An unauthentic…CVE-2026-7412Eclipse Foundation · CVSS 8.6 · 0.5% likely

   CWE-918

2. Unauthenticated SSRF with MNESTIX_BACKEND_API_KEY disclosure in Eclipse Mnestix Browser server actions for configured InfrastructuresCVE-2026-89292Eclipse Foundation · CVSS 9.2 · 0.5% likely

   CWE-918

3. In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-controlled host if the victim is authenti…CVE-2026-12605Eclipse Foundation · CVSS 9.6 · 0.4% likely

   CWE-918

4. In Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts an attacker-controlled URL from any client connected to the standard /services messaging e…CVE-2026-10055Eclipse Foundation · CVSS 8.5 · 0.4% likely

   CWE-918

5. In Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API users in the definition field of a Thing o…CVE-2026-84175Eclipse Foundation · CVSS 5.3 · 0.4% likely

   CWE-918

6. In Eclipse Che versions 7.79.0 through 7.121.0, the dashboard backend's POST /dashboard/api/data/resolver endpoint passes a caller-supplied URL directly to an outbound HTTP GET re…CVE-2026-86590Eclipse Foundation · CVSS 6.3 · 0.4% likely

   CWE-918

7. jwks_uri from the OIDC discovery document is fetched without checking its origin or schemeCVE-2026-107597Eclipse Foundation · CVSS 5.1 · 0.4% likely

   CWE-918

8. In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.CVE-2024-9408Eclipse Foundation · CVSS 8.9 · 0.3% likely

   CWE-918

9. PIA's OIDC issuer allowlist for Jenkins tokens uses a bare string-prefix check (issuer.startswith(' https://ci.eclipse.org ') in is_issuer_known, pia/models.py:139) instead of val…CVE-2026-14336Eclipse Foundation · CVSS 8.2 · 0.3% likely

   CWE-918

10. Unauthenticated SSRF in PIA via OIDC issuer allowlist bypassCVE-2026-18353Eclipse Foundation · CVSS 8.8 · 0.3% likely

    CWE-918

11. In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled URL to `URLFetcher.fetch()`, which call…CVE-2026-86671Eclipse Foundation · CVSS 8.4 · 0.3% likely

    CWE-918

12. The FTP client trusts arbitrary IP addresses in the PASV server responseCVE-2026-102722Eclipse Foundation · CVSS 6.9 · 0.2% likely

    CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.