CVE-2026-88819: Eclipse Foundation Eclipse Data Plane Core

Medium severity, CVSS 6.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.

Affected products

• Eclipse Foundation Eclipse Data Plane Core: from 0.1.0, up to and including 0.1.3

Published 2026-09-14. Last modified 2026-09-16.