Eclipse Foundation Eclipse Milo

All CISA Advisories

October 15, 2026 at 12:00 PM

Overview

The Eclipse Foundation has issued a warning about vulnerabilities in its Eclipse Milo software, which is used for industrial automation. These security flaws could allow attackers to delete protected data, recover user credentials, impersonate legitimate users, or cause the server to become unresponsive. The affected versions include Eclipse Milo 0.6.0 and 1.0.0, up to 1.1.4. Users are urged to upgrade to version 1.1.5 to mitigate these risks. The Cybersecurity and Infrastructure Security Agency (CISA) recommends minimizing network exposure for control systems and using secure methods for remote access to prevent exploitation. Organizations are also advised to report any suspicious activity to CISA for further investigation.

Key Takeaways

Affected Systems: Eclipse Milo versions >=0.6.0 and <=1.1.4
Action Required: Upgrade to Eclipse Milo version 1.
Timeline: Disclosed on October 15, 2026

Original Article Summary

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. The following versions of Eclipse Foundation Eclipse Milo are affected: Eclipse Milo >=0.6.0|=1.0.0|=1.0.0|=1.0.0|=0.6.0|=1.0.0|=0.6.0|=1.0.0|=1.0.0|=0.6.0|=1.0.0|=0.6.0|=1.0.0|=0.6.0|=1.0.0|=0.6.0|=0.6.0|=1.0.0|=0.6.0|=1.0.0|=0.6.0|=0.6.0|=1.0.0|<=1.1.4 Product Status: known_affected Remediations Vendor fix The Eclipse Foundation recommends users upgrade to Eclipse Milo 1.1.5 https://github.com/eclipse-milo/milo/releases/tag/v1.1.5. Mitigation For users on Milo 0.6.x, there are no 0.6.x releases with the fixes, which requires users to migrate to Milo 1.1.5 or later. Additional Metrics Relevant CWE: CWE-772 Missing Release of Resource after Effective Lifetime CVSS Version Base Score Base Severity Vector String 3.1 5.3 MEDIUM CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 4.0 6.9 MEDIUM CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N View CVE Details Acknowledgments Abhinav Agarwal reported these vulnerabilities to CISA. Legal Notice and Terms of Use This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy). Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolating them from business networks. When remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. Revision History Initial Release Date: 2026-10-15 Date Revision Summary 2026-10-15 1 Initial Publication Legal Notice and Terms of Use

Impact

Eclipse Milo versions >=0.6.0 and <=1.1.4

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Disclosed on October 15, 2026

Remediation

Upgrade to Eclipse Milo version 1.1.5 or later; users on Milo 0.6.x must migrate to 1.1.5 as there are no fixes for 0.6.x.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Related Topics: This incident relates to CVE, Vulnerability.

Read Original Article

Related Coverage

Microsoft Teams to get AI-powered, context-aware phishing detection

BleepingComputer

Microsoft is set to enhance its Teams messaging platform with AI-driven phishing detection capabilities starting in early November 2026. This new feature aims to identify and flag potential phishing attempts within Teams messages, helping users avoid falling victim to scams. The integration of AI is expected to improve the accuracy of phishing detection by analyzing the context of messages. This is particularly important as phishing attacks continue to rise, targeting both individuals and organizations. By implementing this technology, Microsoft hopes to bolster security for its users and reduce the risk of data breaches associated with phishing.

Oct 23, 2026

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

The Hacker News

Ruby has released updates to versions 4.0.9, 3.4.12, and 3.3.13 to address three bugs in the Onigmo regular expression engine. These bugs are linked to four critical vulnerabilities that GitLab recently patched. The vulnerabilities could allow attackers to craft specific patterns that may corrupt memory during the compilation process, potentially enabling remote code execution on affected servers. This issue is particularly concerning for GitLab users, as it puts their systems at risk if the vulnerabilities are exploited. Users are encouraged to update to the latest Ruby versions to mitigate these risks.

Oct 23, 2026

Quest Diagnostics confirms data breach exposed patient records

BleepingComputer

Quest Diagnostics, a major American clinical laboratory, has confirmed a data breach involving unauthorized access to its Quanum LSM system. This breach has led to the exposure of sensitive patient records, although the company has not disclosed the exact number of affected individuals or the specific types of data compromised. The incident raises significant concerns about patient privacy and the security of personal health information. As a trusted provider of medical diagnostics, the breach may undermine patient confidence in Quest's ability to protect their sensitive data. This incident serves as a reminder of the ongoing risks faced by healthcare organizations in safeguarding personal information against cyber threats.

Oct 23, 2026

PHP shares mitigation for new RCE vulnerability with no patch

BleepingComputer

The PHP security team has announced a new remote code execution (RCE) vulnerability affecting systems with non-default configurations. This vulnerability currently has no patch available, which raises concerns for users who may be exposed. It is particularly important for administrators to review their configurations to ensure they are not inadvertently leaving their systems vulnerable. The PHP team has provided mitigation measures to help users protect their systems until a fix can be implemented. This situation underscores the ongoing challenges in maintaining secure software environments, especially when vulnerabilities are discovered without immediate solutions.

Oct 23, 2026

You gave your AI agent access, but who is giving it orders?

BleepingComputer

AI agents, designed to assist users, can be manipulated by attackers to perform harmful actions such as stealing data or deleting files. This exploitation occurs through common methods like malicious emails, websites, and plugins that trick the AI into executing unauthorized commands. Gen Digital has introduced its Agent Trust Hub, which aims to enhance the security of these AI agents by verifying their skills, ensuring secure connections, and implementing runtime controls to stop harmful actions before they can cause damage. This incident raises concerns about the security of AI tools, as they operate with legitimate permissions that can be abused if not properly safeguarded. Users and companies need to be vigilant about the commands they give to AI agents and the potential risks involved.

Oct 23, 2026

Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

The Hacker News

Cybersecurity researchers have revealed a significant breach involving exposed network edge devices, particularly targeting Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls. The attackers gained access to over 70,000 user credentials from various organizations around the world. This ongoing campaign aims not only to exploit these devices but also to further compromise the networks of affected victims. Such incidents highlight the vulnerabilities that can arise from improperly secured network devices, urging companies to reassess their security measures. Organizations using these firewall products should take immediate action to secure their systems and protect sensitive information.

Oct 23, 2026