Eclipse Foundation

The Eclipse Foundation has announced the launch of the Sovereign AI Foundation, a new initiative focused on open source approaches to AI control and governance. The move aims to give organisations and governments greater independence over their artificial intelligence stacks, echoing growing interest in sovereign AI and open, transparent alternatives to proprietary models.

The Eclipse Foundation has co-launched a new Sovereign AI Foundation, an initiative aimed at advancing open, independently governed AI technology. The move signals growing momentum behind efforts to build AI infrastructure outside the control of dominant tech vendors, with open-source governance positioned as central to the project. Details on founding partners and initial programs remain limited.

A new vulnerability entry, EUVD-2026-89195, was updated on 29 September 2026 affecting Eclipse Foundation's NetX Duo. Two client-side TLS/DTLS handshake parsers in NetX Secure read fields from a server-supplied message before checking that the message is long enough to contain them, a classic parsing flaw that could expose embedded devices to attacks. No severity score has been assigned yet.

The Eclipse Foundation has announced the creation of the Sovereign AI Foundation, a new initiative in the open-source governance space. No further details on membership, funding or projects were available in the announcement. The move aligns with growing European and international efforts to build AI infrastructure independent of large US technology providers.

A medium-severity vulnerability, EUVD-2026-89199, has been catalogued in Eclipse Foundation's NetX Duo embedded network stack. Rated 6.0 out of 10 under CVSS v3.1, the flaw lies in the FTP component, where passive data connections are not bound to the authenticated control peer, potentially allowing session mixing. The entry was updated on 29 September 2026 via the EU vulnerability database maintained by ENISA.