Eclipse Kura Wire Graph Functionality Vulnerability in Eclipse Kura

CVE-2026-113422

What is CVE-2026-113422?

In certain versions of Eclipse Kura, a vulnerability within the Wire Graph update functionality exposes the system to unauthorized configuration changes. The affected versions allow authenticated users with limited permissions to manipulate settings not intended for their access level. This potentially enables the modification of critical components, leading to escalated privileges and disruptions in device operation. The issue affects the proper identification of factory identifiers during update requests, which could lead to security-relevant components being compromised. The vulnerability has been addressed in the latest release.

References