Eclipse Foundation Eclipse Milo

First reported by CISA Cybersecurity Advisories, concerning icsa-26, Eclipse Foundation, CVE-2026-63252.

1 day ago By HelpMeTrack News Desk Tech & AI

Editorial graphic — no licensed photograph was available for this story.

HelpMeTrack began tracking this technology story after CISA Cybersecurity Advisories reported it on 14 Oct 2026, concerning icsa-26, Eclipse Foundation, CVE-2026-63252.

Tracked as 6 CVEs, including CVE-2026-58080, CVE-2026-60007, CVE-2026-61387, the flaw is rated HIGH with a CVSS score of 8.7 out of 10, classified as CWE-863 Incorrect Authorization. For users on Milo 0.6.x, there are no 0.6.x releases with the fixes, which requires users to migrate to Milo 1.1.5 or later.

Key facts

CVE: CVE-2026-58080, CVE-2026-60007, CVE-2026-61387, CVE-2026-62927, CVE-2026-63248, CVE-2026-63252
Severity: HIGH (CVSS 8.7/10)
Vulnerability type: CWE-863 Incorrect Authorization
Official mitigation: For users on Milo 0.6.x, there are no 0.6.x releases with the fixes, which requires users to migrate to Milo 1.1.5 or later.

Why we're tracking this

We found 6 related reports from CISA Cybersecurity Advisories covering this development. We've tracked 5 further updates as more reporting came in. We'll keep this page updated as the story develops, with links to the original reporting below.

Development timeline

14 Oct, 19:20 UTC First reported by CISA Cybersecurity Advisories
17 Oct, 07:00 UTC Confirmed again by CISA Cybersecurity Advisories
18 Oct, 01:54 UTC Confirmed again by CISA Cybersecurity Advisories
19 Oct, 01:56 UTC Confirmed again by CISA Cybersecurity Advisories
20 Oct, 03:58 UTC Confirmed again by CISA Cybersecurity Advisories
21 Oct, 07:00 UTC Confirmed again by CISA Cybersecurity Advisories