Eclipse Foundation Eclipse Milo

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation Eclipse Milo are affected: Eclipse Milo >=0.6.0|<=1.1.4 (CVE-2026-63252, CVE-2026-63248, CVE-2026-60007) Eclipse Milo >=1.0.

Back to dashboard

Threat CriticalSingle SourceAgencyConf ConfirmedUnited States · North AmericaPublishedStatus: PublishedCERTOpen original source

Original publisher

CERT

Original source URL

https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01

Source country

United States

Reporting region

North America

Language

Institution

CISA US-CERT

Published (UTC)

Oct 15, 2026, 12:00 PM

Ingested (UTC)

Oct 16, 2026, 3:02 PM

Verification

Single Source

BASE INTEL aggregates public reporting. This item is not authored by BASE INTEL. Always review the original publisher before relying on the content.

Eclipse Foundation Eclipse Milo
Advisory ID: icsa-26-288-01
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation Eclipse Milo are affected: Eclipse Milo >=0.6.0|<=1.1.4 (CVE-2026-63252, CVE-2026-63248, CVE-2026-60007) Eclipse Milo >=1.0.
Severity: critical
Published (UTC): 2026-10-15T12:00:00.000Z
Source: CERT
Original source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01

View original source