High Check your exposure CVSS up to 8.2
Eclipse Milo flaws could expose credentials and stop servers responding
CISA ICS AdvisoriesEclipse Foundation Eclipse Milo · chemical, critical manufacturing, energyCVE-2026-63252, CVE-2026-63248, CVE-2026-60007
What happened. Several flaws in Eclipse Milo could let an attacker delete protected data, recover user credentials and impersonate users, or make the server stop responding to all clients. Rated 8.2 on CVSS v3.
Who is affected. Eclipse Milo versions 0.6.0 to 1.1.4 and 1.0.0 to 1.1.4, depending on the flaw. Sectors named: chemical, critical manufacturing, energy, water and wastewater.
What to do. Check whether you run Eclipse Milo versions 0.6.0 to 1.1.4.
Source: CISA ICS Advisories (opens cisa.gov)
More on Chemicals Manufacturing Energy and power CVE-2026-60007 CVE-2026-63248 CVE-2026-63252