CVE-2026-112185

In Eclipse Kura versions 5.1.0 through 5.6.2 , the Configuration REST API v2 (org.eclipse.kura.rest.configuration.provider) contains an authorization flaw. It fails to restrict access to the UserAdmin persistence component to identities possessing the kura.admin permission. Consequently, an authe...