CVE-2026-63248
Last modified
CVE-2026-63248 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security diagnostics for other active sessions, exposing usernames, login history, authentication mechanisms, security modes and policies, and public client certificates.. EPSS estimates a 0.23% chance of exploitation in the next 30 days.
Description
In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security diagnostics for other active sessions, exposing usernames, login history, authentication mechanisms, security modes and policies, and public client certificates.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Eclipse | Milo | >= 0.6.0, < 1.1.5 |
References
- https://gitlab.eclipse.org/security/cve-assignment/-/work_items/181Issue Tracking, Patch, Vendor Advisory
- https://gitlab.eclipse.org/security/vulnerability-reports/-/work_items/598Issue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2026-63248?
How severe is CVE-2026-63248?
How do I fix CVE-2026-63248?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-63238An authentication bypass vulnerability in Koollab LMS allowe…6.5
- CVE-2026-63239A hard-coded AWS IAM credentials vulnerability in Koollab LM…5.4
- CVE-2026-6324A flaw was found in libsoup. A remote attacker could exploit…4.8
- CVE-2026-63240An information disclosure vulnerability in Koollab LMS allow…4.3
- CVE-2026-63241An insecure direct object reference vulnerability in Koollab…3.1
- CVE-2026-63242A business logic vulnerability in Koollab LMS allowed an aut…4.3
- CVE-2026-6325Out-of-bounds write in SetSuitesHashSigAlgo when processing …7.5
- CVE-2026-63252In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server tr…7.5
- CVE-2026-63259Authorization Bypass Through User-Controlled Key (CWE-639) i…4.3
- CVE-2026-63260Uncontrolled Resource Consumption (CWE-400) in Kibana can le…6.5
- CVE-2026-63261Uncontrolled Resource Consumption (CWE-400) in Kibana can le…6.5
- CVE-2026-63262Missing Authorization (CWE-862) in Kibana can lead to unauth…4.3
Are you affected by CVE-2026-63248?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST