Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Eclipse Milo 1.1.5 Clear all filters
TI-2026-41830 CVE-2026-58080 · GHSA-pvvm-cxq7-hrgr

Missing authorization in Eclipse Milo

Priority MEDIUM 44

In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00378 Published 2026-08-04 Fixed in 1.1.5 CWE-862
TI-2026-44975 CVE-2026-62927 · GHSA-978q-37g3-wq8g

Incorrect authorization in Eclipse Milo

Priority MEDIUM 44

In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatches the original mixed batch to address-space handlers after calculating authorization, allowing an anonymous or otherwise low-privileged client to ex…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00418 Published 2026-08-04 Fixed in 1.1.5 CWE-863
TI-2026-44014 CVE-2026-61387 · GHSA-54cr-fx8f-gpc5

Uncontrolled resource consumption in Eclipse Milo

Priority LOW 37

In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0062 Published 2026-08-04 Fixed in 1.1.5 CWE-400