Equinox OSGi vulnerabilities

2 known vulnerabilities in Equinox OSGi from Eclipse Foundation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Equinox OSGi: Missing Authentication for Critical Functionality

  CVE-2023-54344May 5, 2026Eclipse Foundation

  Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending payloads to the console interface. Attackers can connect to the OSGi console port and send base

• 9.8 Critical severity

  Equinox OSGi: Missing Authentication for Critical Functionality

  CVE-2023-54342May 5, 2026Eclipse Foundation

  Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerability in the console interface that allows unauthenticated attackers to execute arbitrary code by exploiting the fork command functionality. Attackers can establish a telnet