Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.3
CVE-2023-54344: Eclipse Equinox OSGi Remote Code Execution
CVE-2023-54344
Summary
Eclipse Equinox OSGi versions 3.7.2 and earlier have a security flaw that allows hackers to run unauthorized commands on your system. This can happen if an attacker connects to a specific port and sends malicious code. To protect yourself, update to the latest version of Eclipse Equinox OSGi.
Original title
Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending payloads to the console interfac...
Original description
Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending payloads to the console interface. Attackers can connect to the OSGi console port and send base64-encoded bash commands wrapped in fork directives to achieve code execution and establish reverse shell connections.
nvd CVSS3.1
9.8
nvd CVSS4.0
9.3
Vulnerability type
CWE-306
Missing Authentication for Critical Function
Published: 5 May 2026 · Updated: 30 May 2026 · First seen: 5 May 2026