Eclipse Equinox Osgi vulnerabilities

2 CVEs affecting Eclipse Equinox Osgi, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-54344, published 2026-05-05.

More from Eclipse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-54344, published 2026-05-05. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending payloads to the console interface.…
• CVE-2023-54342, published 2026-05-05. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerability in the console interface that allows unauthenticated attackers to execute arbitrary code by exploiting the…