CVE-2026-9158

This CVE affects Eclipse 4diac FORTE, versions 3.0.0–3.1.0. A specially crafted DELETE command to the management interface can trigger a dangling pointer, allowing subsequent commands to access freed memory (use-after-free). The issue is tied to the management interface handling of DELETE request...