CVE record · 2 sources
CVE-2026-58080
CVSS 3.1In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`.
- Vendor
- GitHub, Oracle
- CVSS
- 3.1
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Eclipse Foundation Eclipse Milo
Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following…
-
In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`.
In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`. On servers that rely on role permissions and construct the running configuration through `copy()`, sessions…