CVE-2026-63252

Vendor

GitHub, Oracle

CVSS

3.1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 21
   CISA advisory CISA 16d ago

   Eclipse Foundation Eclipse Milo

   Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following…

   CVSS 3.1 Fix available CVE-2026-62927CVE-2026-63252CVE-2026-58080+3 more GitHub Oracle
2. 0
   CVE NVD 4 Aug 2026

   In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel…

   In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel disconnects, allowing a remote unauthenticated client to exhaust pooled direct memory by…

   CVE-2026-63252