Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-78299

Eclipse Embedded CDT (C/C++ Development Tools) · Vulnerability

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-78299

Published

In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-78299

Published

Eclipse Embedded CDT (C/C++ Development Tools)

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Eclipse Foundation",
                    "product": "Eclipse Embedded CDT (C/C++ Development Tools)",
                    "versions": [
                        {
                            "status": "unknown",
                            "version": "0",
                            "lessThan": "6.0.0",
                            "versionType": "semver"
                        },
                        {
                            "status": "affected",
                            "version": "6.0.0",
                            "lessThan": "6.8.0",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON