CVE-2026-110726: Eclipse Connected Services Platform 1.5.4 through 1.7.3

Affected technology

Eclipse Connected Services Platform · 1.5.4 through 1.7.3
Eclipse Foundation

Description’s affected range: versions till `1.7.3`

Component: Not specified by the source

What an attacker can do

A single attacker can therefore obtain an unlimited number of independent rate-limit buckets — one per unique header value — and completely bypass the gateway's request-rate limiting on every route that uses the shipped default configuration.