CVE-2026-112185

In Eclipse Kura versions 5.1.0 through 5.6.2 , the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) contains an authorization flaw. It fails to restrict access to the UserAdmin persistence component to identities possessing the kura.admin permission. Consequently, an authe...

CVE-2026-112191

In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs identity/v1, and identity/v2 since 5.5.0, provided by org.eclipse.kura.rest.identity.provider do not check identity and permission management requests against the permissions of the requesting identity. An authenticated identity...

CVE-2026-112191

In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs identity/v1, and identity/v2 since 5.5.0, provided by org.eclipse.kura.rest.identity.provider do not check identity and permission management requests against the permissions of the requesting identity. An authenticated identity...

EUVD-2026-121263

In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs identity/v1, and identity/v2 since 5.5.0, provided by org.eclipse.kura.rest.identity.provider do not check identity and permission management requests against the permissions of the requesting identity. An authenticated identity...

CVE-2026-112191

In Eclipse Kura versions 5.4.0 through 5.6.2 , the Identity REST APIs (specifically identity/v1 and identity/v2 provided by org.eclipse.kura.rest.identity.provider) fail to validate management requests against the requesting identity's permissions. An authenticated identity with the rest.identity...

PT-2026-141770

In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs identity/v1, and identity/v2 since 5.5.0, provided by org.eclipse.kura.rest.identity.provider do not check identity and permission management requests against the permissions of the requesting identity. An authenticated identity...

CVE-2026-112191: Eclipse Foundation Eclipse Kura: In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs (identity/v1, and identity/v2 since 5.5.0,…

In Eclipse Kura versions 5.4.0 through 5.6.2, the Identity REST APIs identity/v1, and identity/v2 since 5.5.0, provided by org.eclipse.kura.rest.identity.provider do not check identity and permission management requests against the permissions of the requesting identity. An authenticated identity...