CVE-2026-78299

Eclipse Embedded CDT (versions 6.0 through 6.7 ) is affected by a path traversal vulnerability in its CMSIS-Pack archive extraction functionality. When a compromised CMSIS pack is extracted, files can be written to locations outside the intended pack directory , enabling arbitrary file writes to ...

EUVD-2026-77465

In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk...