{"vulnerability": "cve-2026-60007", "sightings": [{"uuid": "bc7557e8-b09b-4df1-8f41-9a2bbef47048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-60007", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fqmspzdd3rxxd", "content": "CVE-2026-60007 - Eclipse Milo Username Token Padding Oracle Vulnerability\nCVE ID : CVE-2026-60007\n \n Published : Aug. 4, 2026, 1:18 p.m. | 27\u00a0minutes ago\n \n Description : In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for...", "creation_timestamp": "2026-08-04T14:06:28.638587Z"}, {"uuid": "2197fe54-8524-46a3-bb91-d23f5f0af244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60007", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msb4o36xrd2i", "content": "CRITICAL (CVSS 9.1) flaw in Eclipse Milo (0.6.0 \u2013 1.1.4): padding oracle via username-token errors lets attackers recover passwords. Patch status unknown, check vendor advisory. https://radar.offseq.com/threat/cve-2026-60007-cwe-204-in-eclipse-foundation-eclipse-milo-bf23a775f0392e71 #OffSeq #Ecl...", "creation_timestamp": "2026-08-04T13:30:24.904781Z"}, {"uuid": "70988732-13a3-4512-bdc3-1bd7a7deec0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-60007", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117037480022382500", "content": "Eclipse Milo (0.6.0 \u2013 1.1.4) faces a CRITICAL flaw (CVE-2026-60007): error messages in username-token RSA PKCS#1 v1.5 handling enable padding oracle attacks, risking password compromise. Patch status unclear. https://radar.offseq.com/threat/cve-2026-60007-cwe-204-in-eclipse-foundation-eclipse-milo-bf23a775f0392e71 #OffSeq #EclipseMilo #Vuln #Infosec", "creation_timestamp": "2026-08-04T13:30:27.424467Z"}]}