Skip to content

Vulnerabilities of Eclipse Foundation Eclipse Milo

Is your version affected?

CVE Summary Score Published
CVE-2026-63248 In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization 6.9 Medium Aug 4, 2026
CVE-2026-58080 In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper` 8.8 High Aug 4, 2026
CVE-2026-63252 In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message… 8.7 High Aug 4, 2026
CVE-2026-62927 In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space… 8.7 High Aug 4, 2026
CVE-2026-60007 In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA… 9.1 Critical Aug 4, 2026
CVE-2026-61387 In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation… 6.9 Medium Aug 4, 2026

Other Eclipse Foundation products