Threats tagged 'ghsa-xg6h-qgc7-qqr7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.3%	CVE-2026-63248Eclipse Milo · Missing Authorization Medium6.9EPSS 0.3%2026-08-04CVE Database V5CVE-2026-63248 Eclipse Milo versions 0.6.0 through 1.1.4 have a vulnerability where OPC UA server diagnostics nodes do not enforce access authorization. This allows an anonymous client to enable diagnostics without authentication and a trusted client to read sensitive security diagnostics of other sessions, including usernames and authentication details. EPSS 0.3%Vulnerability Eclipse Foundation CWE-862 #ghsa-xg6h-qgc7-qqr7	CVE Database V5	2026-08-04

Page 1 of 1