[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faYpWD8rTHPtpo9LYoquOnp_SvBJB0D0z_cakceRd_5w":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":134},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":30},"eee1c99a-e09b-4c1f-8718-285b0cf41930","Eclipse Foundation Eclipse Milo","eclipse-foundation-eclipse-milo-fbd4f0","View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation Eclipse Milo are affected: Eclipse Milo >=0.6.0| =1.0.0| =1.0.0| =1.0.0| =0.6.0| =1.0.0| =0.6.0| =1.0.0| =1.0.0| =0.6.0| =1.0.0| =0.6.0| =1.0.0| =0.6.0| =1.0.0| =0.6.0| =0.6.0| =1.0.0| =0.6.0| =1.0.0| =0.6.0| =0.6.0| =1.0.0|\u003C=1.1.4 Product Status: known_affected Remediations Vendor fix The Eclipse Foundation recommends users upgrade to Eclipse Milo 1.1.5 https:\u002F\u002Fgithub.com\u002Feclipse-milo\u002Fmilo\u002Freleases\u002Ftag\u002Fv1.1.5. Mitigation For users on Milo 0.6.x, there are no 0.6.x releases with the fixes, which requires users to migrate to Milo 1.1.5 or later. Additional Metrics Relevant CWE: CWE-772 Missing Release of Resource after Effective Lifetime CVSS Version Base Score Base Severity Vector String 3.1 5.3 MEDIUM CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L 4.0 6.9 MEDIUM CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:L\u002FSC:N\u002FSI:N\u002FSA:N View CVE Details Acknowledgments Abhinav Agarwal reported these vulnerabilities to CISA. Legal Notice and Terms of Use This product is provided subject to this Notification (https:\u002F\u002Fwww.cisa.gov\u002Fnotification) and this Privacy & Use policy (https:\u002F\u002Fwww.cisa.gov\u002Fprivacy-policy). Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and\u002For systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov\u002Fics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov\u002Fics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Revision History Initial Release Date: 2026-10-15 Date Revision Summary 2026-10-15 1 Initial Publication Legal Notice and Terms of Use","The Eclipse Foundation has released an advisory for vulnerabilities in Eclipse Milo, affecting versions from 0.6.0 up to 1.1.4. Successful exploitation could lead to data deletion, credential recovery, user impersonation, or denial of service. CISA recommends updating to Eclipse Milo 1.1.5 or later, and implementing network exposure minimization and secure remote access practices.","Eclipse Milo versions >=0.6.0 and \u003C=1.1.4 have vulnerabilities allowing data deletion, credential recovery, and denial","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-288-01",null,"2026-10-15T12:00:00+00:00","2026-10-15T18:00:17.912281+00:00",8,[17,20,23],{"name":18,"type":19},"Eclipse Milo","product",{"name":21,"type":22},"Eclipse Foundation","vendor",{"name":24,"type":25},"Industrial Control System","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":12,"name":28,"slug":29},"Vulnerabilities","vulnerabilities",[31,33,38],{"category":32},{"id":26,"icon":12,"name":28,"slug":29},{"category":34},{"id":35,"icon":12,"name":36,"slug":37},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":39},{"id":40,"icon":12,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":46,"vendors":133},[47,76,104],{"slug":48,"name":49,"problem":50,"products":51},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"slug":77,"name":78,"problem":79,"products":80},"patch-management","Automated patch management","Known holes get closed in days, not months.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":77,"product_name":101,"url":102,"description":103},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":105,"name":106,"problem":107,"products":108},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[109,117,125],{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",[],{"slug":135,"title":136,"body":137,"framework_refs":138,"framework_notes":149},"eclipse-milo-vulnerabilities-enable-data-loss-impersonation-and-dos","Eclipse Milo Vulnerabilities Enable Data Loss, Impersonation, and DoS","Multiple vulnerabilities in Eclipse Milo (versions 0.6.0 through 1.1.4) expose OPC UA implementations to serious risks including data deletion, credential recovery, user impersonation, and denial of service. These flaws highlight the critical importance of maintaining up-to-date dependencies in industrial and IoT communication frameworks, where exploitation can have operational and safety consequences. Organizations relying on Eclipse Milo in SCADA, ICS, or other operational technology environments are especially at risk if network exposure is not minimized. Delayed patching in environments using open-source middleware libraries is a persistent and dangerous gap in many vulnerability management programs.",[139,140,141,142,143,144,145,146,147,148],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 16: Application Software Security","NIST SP 800-82: Guide to ICS Security","NIST SI-2: Flaw Remediation","NIST AC-17: Remote Access","NIST SC-7: Boundary Protection","IEC 62443-3-3: System Security Requirements (SR 1.1, SR 2.1)","CISA ICS Advisory Best Practices: Network Exposure Minimization","ITIL: Change and Release Management (patching workflows)",{}]