CVE-2026-9158(eclipse / 4diac_forte)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a dangling pointer. This allows subsequent commands to access freed memory (use-after-free).

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 4diac_forte

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
Products
4diac_forte

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-11-07: 111-07
Full discourse1 post
  • DFIR Lab@DFIR_Lab

    🚨 CRITICAL: CVE-2026-9158 (CVSS 9.8) Eclipse 4diac FORTE v3.0.0-3.1.0 vulnerable to use-after-free via crafted DELETE commands. Network exploitable, no auth required. Patch immediately. #CVE #PatchNow https://t.co/j4v5Bn7V3f

    0000037
    162 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appeclipse4diac_forte---

Explore more