Product

Eclipse Foundation Eclipse KeyPont vulnerabilities

1 published CVE affecting Eclipse Foundation Eclipse KeyPont, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest Eclipse Foundation Eclipse KeyPont CVEs

Newest publication first

CVE-2026-115408 ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets
Published 2026-10-27

MediumCVSS 5.5 EPSS 0.08%

In github.com/eclipse-keypont/crypto11/v2 versions >= 2.0.0-rc3, <= 2.0.0-rc8, the ML-KEM key-pair lookup functions (FindMLKEMKeyPair, FindMLKEMKeyPairs, FindMLKEMKeyPairsWithAttributes) locate the public half of an ML-KEM key pair by CKA_ID/CKA_LABEL and never verify it against...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

Eclipse Foundation Eclipse KeyPont vulnerabilities

Latest Eclipse Foundation Eclipse KeyPont CVEs

CVE-2026-115408 ML-KEM key-pair lookup can bind an unrelated or attacker-planted public key, exposing encapsulated shared secrets