Threats affecting pkg:github/Eclipse KUKSA - Databroker

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.3%	CVE-2026-6272Eclipse KUKSA – Databroker · Missing Authentication High8.5EPSS 0.3%2026-04-24CVE Database V5CVE-2026-6272 CVE-2026-6272 is a high-severity vulnerability in Eclipse Foundation's Eclipse KUKSA - Databroker version 0.5.0. It involves missing authentication for a critical function, allowing a client with only read JWT scope to register as a signal provider via the OpenProviderStream API. This enables the attacker to send forged data responses to other clients requesting signal values, potentially compromising data integrity. EPSS 0.3%Vulnerability Eclipse Foundation CWE-306	CVE Database V5	2026-04-24

Page 1 of 1