CVE-2026-115216：Eclipse ioFog Operator TLS 憑證驗證被關閉，導致憑證洩漏

在 Eclipse ioFog Operator 3.8.0 版至 3.9.2 之前，當 Operator 與 Controller API 通訊或登入外部 OIDC 供應者時，TLS 憑證驗證被停用。中間人攻擊者可提供任意憑證，捕獲 OAuth 客戶端金鑰（外部模式）或 Controller 啟動管理員密碼（嵌入模式且 Controller HTTPS 已啟用），並提供 Operator 儲存以供後續 Controller API 呼叫的存取權杖。v3.8 移除了 Keycloak。暴露的憑證並非 Keycloak realm-admin 金鑰。

影響

受影響產品

以下產品受到 CVE-2026-115216 漏洞影響。 即使 cvefeed.io 知道受影響產品的確切版本，該資訊未在下表中呈現。

尚未記錄受影響產品

Common Vulnerability Scoring System（CVSS）是一套標準化框架，用於評估軟體與系統漏洞的嚴重度。 我們從各個來源收集並顯示每個 CVE 的 CVSS 分數。

升級 Eclipse ioFog Operator 至 3.9.2 或更新版本以啟用 TLS 憑證驗證。

• 升級 ioFog Operator 至已修補的版本。
• 確保已啟用 TLS 憑證驗證。
• 檢查並確保所有控制器 API 憑證安全。
• 輪換任何可能暴露的機密。

在此，您將找到一份精選的外部連結清單，提供關於 CVE-2026-115216 的深入資訊、實用解決方案與有價值的工具。

雖然 CVE 識別具體的漏洞例項，CWE 則將可能導致漏洞的常見缺陷或弱點分類。CVE-2026-115216 與以下 CWEs 相關聯：

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2026-115216 weaknesses.

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2026-115216 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2026-115216 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

• New CVE Received By [email protected]

  十月. 27, 2026

  Action	Type	Old Value	New Value
  Added	Description		In Eclipse ioFog Operator versions 3.8.0 before 3.9.2, TLS certificate verification is disabled when the operator contacts the Controller API and when it logs in to an external OIDC issuer. An on-path attacker can present any certificate, capture the OAuth client secret (external mode) or the Controller bootstrap admin password (embedded mode with Controller HTTPS enabled), and supply the access token the operator stores for later Controller API calls. v3.8 removed Keycloak. The exposed credential is not a Keycloak realm-admin secret.
  Added	CVSS V4.0		AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  Added	CWE		CWE-295
  Added	Affected		New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/115xxx/CVE-2026-115216.json">CVE-2026-115216</a>
  Added	Reference		https://github.com/eclipse-iofog/iofog-operator/releases/tag/v3.9.2
  Added	Reference		https://gitlab.eclipse.org/security/cve-assignment/-/work_items/519
  Added	Reference		https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/1064

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.