CVE-2026-60007
High
Description
In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's `Basic128Rsa15`-encrypted username token to use repeated unauthenticated `ActivateSession` requests as a padding oracle, recover the victim's password, and authenticate with the recovered credentials.
SeverityHigh
CVSS7.4
Exploit probability46. percentile0.6%
ProductEclipse Milo
PublishedAug 4, 2026
First seenAug 4, 2026
Weakness typeCWE-204CWE-204
How to fix
Update
- eclipse milo1.1.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eclipse milo | 0.6.0 ≤ v < 1.1.5 | 1.1.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.