Login Request a demo
EM
Product
Eclipse Milo
by Eclipse Foundation · last CVE Aug 4, 2026
6
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities6In the news1Timeline
Severity mix
Critical 0High 5Medium 1Low 0
Severity
All severities6Critical0High5Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Eclipse Milo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-58080
8.2
0%
Aug 4
In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`
Affected: 1.0.0 before 1.1.5
CVE-2026-63252
7.5
1%
Aug 4
In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote…
Affected: 0.6.0 through 1.1.4
CVE-2026-62927
7.5
0%
Aug 4
In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous…
Affected: 1.0.0 before 1.1.5
CVE-2026-61387
7.5
1%
Aug 4
In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation…
Affected: 1.0.0 before 1.1.5
CVE-2026-60007
7.4
1%
Aug 4
In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures,…
Affected: 0.6.0 through 1.1.4
CVE-2026-63248
6.5
0%
Aug 4
In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization
Affected: 0.6.0 through 1.1.4
Showing 6