What is CVE-2026-15704?

CVE-2026-15704 is a critical-severity vulnerability in Eclipse Foundation Basyx Go Components, classified under CWE-180. CVSS score: 9.8/10. Published 2026-07-24.

How severe is CVE-2026-15704?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Eclipse Foundation Basyx Go Components

CVE-2026-15704

In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are vulnerable to an authorization bypass caused by inconsistent trailing-slash handling between the ABAC middleware and the HTTP router. The sh…

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Eclipse Foundation Basyx Go Components — versions 0

Weakness classification (CWE)

CWE-180
CWE-284 — Improper Access Control
CWE-863 — Incorrect Authorization

References

emo@eclipse.org
emo@eclipse.org
emo@eclipse.org
emo@eclipse.org

Frequently asked questions

What is CVE-2026-15704?: CVE-2026-15704 is a critical-severity vulnerability in Eclipse Foundation Basyx Go Components, classified under CWE-180. CVSS score: 9.8/10. Published 2026-07-24.
How severe is CVE-2026-15704?: Critical severity. CVSS v3 base score is 9.8 out of 10.