CVE-2026-86671 - Eclipse Che Server-Side Request Forgery Vulnerability
CVE ID :CVE-2026-86671 Published : Oct. 5, 2026, 4:21 p.m. | 1 hour, 6 minutes ago Description :In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled URL to `URLFetcher.fetch()`, which calls `new...