What is CVE-2026-63248?

Upgrade Eclipse Milo to version 1.1.5 or later. Legacy 0.6.x users must migrate to 1.1.5 or later as no 0.6.x releases contain the fixes. Apply vendor-recommended patches and monitor for updates.

Is CVE-2026-63248 known to be exploited?

It is not marked known-exploited in this record.

How should CVE-2026-63248 be mitigated?

Upgrade Eclipse Milo to version 1.1.5 or later. Legacy 0.6.x users must migrate to 1.1.5 or later as no 0.6.x releases contain the fixes. Apply vendor-recommended patches and monitor for updates.

CVE-2026-63248

CCISA Advisoriesinvulnerability·Oct 17high

Six Vulnerabilities Discovered in Eclipse Foundation Eclipse Milo Industrial IoT Library

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added six CVEs to its Known Exploited Vulnerabilities catalog affecting Eclipse Foundation Eclipse Milo, a Java library used in industrial automation and IIoT deployments. Vulnerabilities span versions 0.6.0 through 1.1.4 and include incorrect authorization, missing memory release, and missing authorization flaws that could allow unauthenticated remote attackers to delete protected data, recover credentials, impersonate users, or cause denial of service. The vendor has released Eclipse Milo 1.1.5 as the first fixed version; users on the legacy 0.6.x series must migrate to 1.1.5 or later.

12m

CVE-2026-63248

Quick answers

Related News

Six Vulnerabilities Discovered in Eclipse Foundation Eclipse Milo Industrial IoT Library