CVE-2026-60007

CVE-2026-60007 affects Eclipse Milo versions 0.6.0 through 1.1.4, where username-token processing reveals distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures. This enables a network-accessible, on-path attacker who captures a victim’s Basic128Rsa15-encrypt...

CVE-2026-60007

In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's Basic128Rsa15-encrypted username token to use repeated unauthenticated...

CVE-2026-60007

In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's Basic128Rsa15-encrypted username token to use repeated unauthenticated...

com.digitalpetri.byteops:byteops-milo (0.2.1), com.digitalpetri.opcua:uanodeset-core (>=0.3, <=0.4.1) +28 more potentially affected by CVE-2026-61387 via org.eclipse.milo:milo-stack-core (>=1.0.0, <=1.1.4)

org.eclipse.milo:milo-stack-core MAVEN version =1.0.0, =0.3, =0.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.4.4, =4.18.1, =3.31.0, =3.38.0 and more Source cves: CVE-2026-61387 Source advisory: MEND:CVE-2026-61387...

CVE-2026-61387

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

EUVD-2026-52659

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

CVE-2026-61387

CVE-2026-61387 (Eclipse Milo) affects Milo 1.0.0–1.1.4. The issue is that monitored-item quota accounting is not exception-safe: if item creation fails due to an unchecked error, the server-global reservation is not restored. Additionally, deeply nested PubSub ExtensionObjects in a CreateMonitore...

CVE-2026-61387

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

CVE-2026-61387

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

com.digitalpetri.opcua:uanodeset-namespace (>=0.3, <=0.4.1), net.rossonet.waldot:waldot-client (0.6.1) +15 more potentially affected by CVE-2026-61387 via org.eclipse.milo:milo-sdk-server (>=1.0.0, <=1.1.4)

org.eclipse.milo:milo-sdk-server MAVEN version =1.0.0, =0.3, =0.3.3, =0.3.3, =0.3.3, =0.3.3, =0.4.4, =4.18.1, =3.31.0, =3.31.0, =3.31.0, =4.16.0, =4.16.0, =1.0.1, =1.1.4 and more Source cves: CVE-2026-61387 Source advisory: MEND:CVE-2026-61387...

CVE-2026-61387

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

PT-2026-67697

Name of the Vulnerable Software and Affected Versions Eclipse Milo versions 1.0.0 through 1.1.4 Description Monitored-item quota accounting is not exception-safe, meaning that if item creation fails due to an unchecked error, the server-global reservation is not restored. An unauthenticated remot...

CVE-2026-61387: Improper Cleanup on Thrown Exception

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a CreateMonitoredItems event filter can trigger a...

CVE-2026-58080: Missing Authorization

In Eclipse Milo versions 1.0.0 through 1.1.4, OpcUaServerConfig.copy fails to preserve a configured RoleMapper. On servers that rely on role permissions and construct the running configuration through copy, sessions receive no role IDs and the default access controller skips role-permission check...

CVE-2026-62927: Incorrect Authorization

In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous or otherwise low-privileged client to execute a denied method by batching it with an allowed method...

CVE-2026-63248: Missing Authorization

In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security...

PT-2026-67700

Name of the Vulnerable Software and Affected Versions Eclipse Milo versions 0.6.0 through 1.1.4 Description UASC server transport handlers do not release retained partial message chunks upon channel disconnection. This allows a remote unauthenticated client to exhaust pooled direct memory by...

PT-2026-67699

Name of the Vulnerable Software and Affected Versions Eclipse Milo versions 0.6.0 through 1.1.4 Description OPC UA server diagnostics nodes fail to enforce access authorization. This allows an anonymous client to enable diagnostics via a None/None endpoint without a certificate. Additionally, a...

PT-2026-67698

Name of the Vulnerable Software and Affected Versions Eclipse Milo versions 1.0.0 through 1.1.4 Description The Call service dispatches the original mixed batch to address-space handlers after calculating authorization. This allows an anonymous or low-privileged client to execute a denied method ...

PT-2026-67695

Name of the Vulnerable Software and Affected Versions Eclipse Milo versions 1.0.0 through 1.1.4 Description The OpcUaServerConfig.copy function fails to preserve a configured RoleMapper. On servers that rely on role permissions and construct the running configuration using copy, sessions are not...