Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional data_point field in PublishValueRequest. When a request contains a valid signal_id but omits data_point, the server directly calls unwrap() on request.data_point, triggering a panic in the Tokio worker thread. This issue can be triggered by any client holding a valid JWT token. Unauthenticated or invalid-token requests are rejected and do not reach the vulnerable path. The panic causes the individual gRPC call to be cancelled but does not terminate the Databroker process, which remains available for subsequent requests.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-07-14 | 2 | Disclosure2 |
| 2026-07-15 | 1 | Disclosure1 |
🟠 Eclipse KUKSA Databroker, Denial of Service (Unwrapping Optional Field), #CVE-2026-13699 (MEDIUM) -DC-Jul2026-977 https://dailycve.com/eclipse-kuksa-databroker-denial-of-service-unwrapping-optional-field-cve-2026-13699-medium-dc-jul2026-977/
Post summary
The entry announces a medium‑severity Denial of Service vulnerability in the Eclipse KUKSA Databroker, listing CVE‑2026‑13699 with no exploit, PoC, or patch details provided.
🚨*CVE* CVE-2026-13699 In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional data_point field in PublishV… https://www.cve.org/CVERecord?id=CVE-2026-13699 ----- Traducción: CVE-2026-13699 En … http://infoflow.cloud`
Post summary
CVE-2026-13699 details a missing validation for the optional data_point field in Eclipse KUKSA Databroker’s gRPC handler, exposing a potential vulnerability but with no mention of exploitation or mitigation.
CVE-2026-13699 In Eclipse KUKSA Databroker version 0.6.1, the kuksa.val.v2.VAL/PublishValue gRPC handler fails to validate the existence of the optional data_point field in PublishV… https://www.cve.org/CVERecord?id=CVE-2026-13699
Post summary
The text announces CVE-2026-13699, describing a gRPC validation issue in Eclipse KUKSA Databroker without providing PoC, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | eclipse | kuksa | 0.6.1 | - | - |