Eclipse Foundation Eclipse Milo
Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-63252US | high7.5 | — | ||
In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote unauthent… | ||||
| CVE-2026-63248US | medium6.5OT elevated | — | ||
In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpo… | ||||
| CVE-2026-62927US | high7.5OT elevated | — | ||
In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous… | ||||
| CVE-2026-61387US | high7.5 | — | ||
In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation i… | ||||
| CVE-2026-60007US | high7.4 | — | ||
In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures, allowi… | ||||
| CVE-2026-58080US | high8.2OT elevated | — | ||
In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`. On servers that rely on role permissions and construct the run… | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-26-288-01 JSONself
- ICSA Advisory ICSA-26-288-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (12)
- MitigationEclipse Milo
For users on Milo 0.6.x, there are no 0.6.x releases with the fixes, which requires users to migrate to Milo 1.1.5 or later.
- MitigationEclipse Milo
For users on Milo 0.6.x, there are no 0.6.x releases with the fixes, which requires users to migrate to Milo 1.1.5 or later.
- MitigationEclipse Milo
For users on Milo 0.6.x, there are no 0.6.x releases with the fixes, which requires users to migrate to Milo 1.1.5 or later.
- MitigationEclipse Milo
For users on Milo 0.6.x, there are no 0.6.x releases with the fixes, which requires users to migrate to Milo 1.1.5 or later.
- MitigationEclipse Milo
For users on Milo 0.6.x, there are no 0.6.x releases with the fixes, which requires users to migrate to Milo 1.1.5 or later.
- MitigationEclipse Milo
For users on Milo 0.6.x, there are no 0.6.x releases with the fixes, which requires users to migrate to Milo 1.1.5 or later.
- FixedEclipse Milo
The Eclipse Foundation recommends users upgrade to Eclipse Milo 1.1.5 https://github.com/eclipse-milo/milo/releases/tag/v1.1.5.
https://github.com/eclipse-milo/milo/releases/tag/v1.1.5 - FixedEclipse Milo
The Eclipse Foundation recommends users upgrade to Eclipse Milo 1.1.5 https://github.com/eclipse-milo/milo/releases/tag/v1.1.5.
https://github.com/eclipse-milo/milo/releases/tag/v1.1.5 - FixedEclipse Milo
The Eclipse Foundation recommends users upgrade to Eclipse Milo 1.1.5 https://github.com/eclipse-milo/milo/releases/tag/v1.1.5.
https://github.com/eclipse-milo/milo/releases/tag/v1.1.5 - FixedEclipse Milo
The Eclipse Foundation recommends users upgrade to Eclipse Milo 1.1.5 https://github.com/eclipse-milo/milo/releases/tag/v1.1.5.
https://github.com/eclipse-milo/milo/releases/tag/v1.1.5 - FixedEclipse Milo
The Eclipse Foundation recommends users upgrade to Eclipse Milo 1.1.5 https://github.com/eclipse-milo/milo/releases/tag/v1.1.5.
https://github.com/eclipse-milo/milo/releases/tag/v1.1.5 - FixedEclipse Milo
The Eclipse Foundation recommends users upgrade to Eclipse Milo 1.1.5 https://github.com/eclipse-milo/milo/releases/tag/v1.1.5.
https://github.com/eclipse-milo/milo/releases/tag/v1.1.5
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan