Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-60007

In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other authentication failures, allowing an on-path attacker who captures a victim's `Basic128Rsa15`-encrypted username token to use repeated unauthenticated `ActivateSession` requests as a padding oracle, recover the victim's password, and authenticate with the recovered credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 37.2%
CVSS Severity
CVSS v3 Score 7.4
Products affected by CVE-2026-60007
  • Eclipse » Milo » Version: 0.6.0
    cpe:2.3:a:eclipse:milo:0.6.0
  • Eclipse » Milo » Version: 0.6.1
    cpe:2.3:a:eclipse:milo:0.6.1
  • Eclipse » Milo » Version: 0.6.10
    cpe:2.3:a:eclipse:milo:0.6.10
  • Eclipse » Milo » Version: 0.6.11
    cpe:2.3:a:eclipse:milo:0.6.11
  • Eclipse » Milo » Version: 0.6.12
    cpe:2.3:a:eclipse:milo:0.6.12
  • Eclipse » Milo » Version: 0.6.13
    cpe:2.3:a:eclipse:milo:0.6.13
  • Eclipse » Milo » Version: 0.6.14
    cpe:2.3:a:eclipse:milo:0.6.14
  • Eclipse » Milo » Version: 0.6.15
    cpe:2.3:a:eclipse:milo:0.6.15
  • Eclipse » Milo » Version: 0.6.16
    cpe:2.3:a:eclipse:milo:0.6.16
  • Eclipse » Milo » Version: 0.6.2
    cpe:2.3:a:eclipse:milo:0.6.2
  • Eclipse » Milo » Version: 0.6.3
    cpe:2.3:a:eclipse:milo:0.6.3
  • Eclipse » Milo » Version: 0.6.4
    cpe:2.3:a:eclipse:milo:0.6.4
  • Eclipse » Milo » Version: 0.6.5
    cpe:2.3:a:eclipse:milo:0.6.5
  • Eclipse » Milo » Version: 0.6.6
    cpe:2.3:a:eclipse:milo:0.6.6
  • Eclipse » Milo » Version: 0.6.7
    cpe:2.3:a:eclipse:milo:0.6.7
  • Eclipse » Milo » Version: 0.6.8
    cpe:2.3:a:eclipse:milo:0.6.8
  • Eclipse » Milo » Version: 0.6.9
    cpe:2.3:a:eclipse:milo:0.6.9
  • Eclipse » Milo » Version: 1.0.0
    cpe:2.3:a:eclipse:milo:1.0.0
  • Eclipse » Milo » Version: 1.0.1
    cpe:2.3:a:eclipse:milo:1.0.1
  • Eclipse » Milo » Version: 1.0.2
    cpe:2.3:a:eclipse:milo:1.0.2
  • Eclipse » Milo » Version: 1.0.3
    cpe:2.3:a:eclipse:milo:1.0.3
  • Eclipse » Milo » Version: 1.0.4
    cpe:2.3:a:eclipse:milo:1.0.4
  • Eclipse » Milo » Version: 1.0.5
    cpe:2.3:a:eclipse:milo:1.0.5
  • Eclipse » Milo » Version: 1.0.6
    cpe:2.3:a:eclipse:milo:1.0.6
  • Eclipse » Milo » Version: 1.0.7
    cpe:2.3:a:eclipse:milo:1.0.7
  • Eclipse » Milo » Version: 1.0.8
    cpe:2.3:a:eclipse:milo:1.0.8
  • Eclipse » Milo » Version: 1.1.0
    cpe:2.3:a:eclipse:milo:1.1.0
  • Eclipse » Milo » Version: 1.1.1
    cpe:2.3:a:eclipse:milo:1.1.1
  • Eclipse » Milo » Version: 1.1.2
    cpe:2.3:a:eclipse:milo:1.1.2
  • Eclipse » Milo » Version: 1.1.3
    cpe:2.3:a:eclipse:milo:1.1.3
  • Eclipse » Milo » Version: 1.1.4
    cpe:2.3:a:eclipse:milo:1.1.4


Products
Pricing
Contact Us

Shodan ® - All rights reserved