Eclipse Foundation

A new vulnerability entry, EUVD-2026-89195, was updated on 29 September 2026 affecting Eclipse Foundation's NetX Duo. Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before checking that the message is long enough to contain them, a classic parsing flaw that could expose embedded devices to attacks. No severity score has been assigned yet.

A medium-severity vulnerability, EUVD-2026-89199, has been catalogued in Eclipse Foundation's NetX Duo embedded network stack. Rated 6.0 out of 10 under CVSS v3.1, the flaw lies in the FTP component, where passive data connections are not bound to the authenticated control peer, potentially allowing session mixing. The entry was updated on 29 September 2026 via the EU vulnerability database maintained by ENISA.

The Eclipse Foundation has announced the launch of the Sovereign AI Foundation, a new initiative aimed at advancing open source approaches to artificial intelligence and giving organisations greater control over AI technology. The move signals growing concern among software communities that AI development is increasingly concentrated in the hands of a few large companies, and that open governance models could offer an alternative.

The Eclipse Foundation has announced the creation of the Sovereign AI Foundation, a new initiative in the open-source governance space. No further details on membership, funding or projects were available in the announcement. The move aligns with growing European and international efforts to build AI infrastructure independent of large US technology providers.