EXPOSURES › CVE-2026-9158
CVE-2026-9158
CRITICAL
DETAIL
SourceNVD · cve
Published2026-06-18
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-9158 ↗
SHAME 35/100
In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a dangling pointer. This allows subsequent commands to access freed memory (use-after-free).
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
DESCRIPTION
In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a dangling pointer. This allows subsequent commands to access freed memory (use-after-free).
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.