CVE-2026-61387

Vendor

GitHub, Oracle

CVSS

3.1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CISA advisory CISA 16d ago

   Eclipse Foundation Eclipse Milo

   Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following…

   CVSS 3.1 Fix available CVE-2026-62927CVE-2026-63252CVE-2026-58080+3 more GitHub Oracle
2. 6
   CVE NVD 4 Aug 2026

   In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error…

   In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub…

   CVE-2026-61387