CVE-2026-19864: Affected product not specified by the source

Affected technology

Product not specified by the source · 9.4.0 through 9.4.64, 10.0.0 through 10.0.32, 11.0.0 through 11.0.32, 12.0.0 through 12.0.38, 12.1.0 through 12.1.12
Eclipse Foundation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · High privileges required · No user interaction required

What an attacker can do

An attacker with sufficient privileges to read the persisted session data may obtain the plaintext passwords of authenticated users. Vendor/CNA’s CVSS 4.0 assessment (base score 5.6/10) rates confidentiality impact as high; integrity and availability impact as none.