Threats tagged 'ghsa-jrjq-9cmf-3h6f'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.6%	CVE-2026-60007Eclipse Milo · CWE-204 Critical9.1EPSS 0.6%2026-08-04CVE Database V5CVE-2026-60007 CVE-2026-60007 is a critical vulnerability in Eclipse Milo versions 0.6.0 through 1.1.4 where username-token processing leaks distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures. This flaw allows an on-path attacker to exploit repeated unauthenticated ActivateSession requests as a padding oracle to recover a victim's password and authenticate using the recovered credentials. EPSS 0.6%Vulnerability Eclipse Foundation CWE-204 #ghsa-jrjq-9cmf-3h6f	CVE Database V5	2026-08-04

Page 1 of 1