CVE-2026-60007

Vendor

Oracle

Product

oracle

CVSS

3.1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CISA advisory CISA 16d ago

   Eclipse Foundation Eclipse Milo

   Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following…

   CVSS 3.1 Fix available CVE-2026-62927CVE-2026-63252CVE-2026-58080+3 more GitHub Oracle
2. 0
   CVE NVD 4 Aug 2026

   In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other…

   In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's…

   CVE-2026-60007 Oracle