https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:24:22.921348+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-344095 EUVD-2026-344095 2026-10-05T20:24:22.989275+00:00 EUVD-2026-344095 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63248 fkie_cve-2026-63248 2026-10-05T20:24:22.989316+00:00

In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security diagnostics for other active sessions, exposing usernames, login history, authentication mechanisms, security modes and policies, and public client certificates.

 https://cve.radiocsirt.org/vuln/ghsa-xg6h-qgc7-qqr7 GHSA-xg6h-qgc7-qqr7 2026-10-05T20:24:22.989350+00:00

In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can enable diagnostics over a None/None endpoint without a certificate; with a trusted client application certificate over SignAndEncrypt, it can read security diagnostics for other active sessions, exposing usernames, login history, authentication mechanisms, security modes and policies, and public client certificates.