{"metadata": {"vulnerability": "CVE-2026-60007", "count": 22, "kinds": {"milestone": 5, "sighting": 6, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-07-16T13:58:02.246Z", "date_only": false, "value": "2026-07-16T13:58:02.246Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-60007", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-04T11:55:41.934Z", "date_only": false, "value": "2026-08-04T11:55:41.934Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-60007", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-08-04T11:59:59.234Z", "date_only": false, "value": "2026-08-04T11:59:59.234Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / eclipse", "record": "CVE-2026-60007", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T13:18:55Z", "date_only": false, "value": "2026-08-04T13:18:55Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-JRJQ-9CMF-3H6F", "record": "GHSA-JRJQ-9CMF-3H6F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-08-04T13:18:55.427Z", "date_only": false, "value": "2026-08-04T13:18:55.427", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-60007", "record": "FKIE_CVE-2026-60007", "field": "published"}, {"timestamp": "2026-08-04T13:30:24.904Z", "date_only": false, "value": "2026-08-04T13:30:24.904781Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3msb4o36xrd2i", "record": "cve-2026-60007", "field": "creation_timestamp", "uuid": "2197fe54-8524-46a3-bb91-d23f5f0af244", "content": "CRITICAL (CVSS 9.1) flaw in Eclipse Milo (0.6.0 \u2013 1.1.4): padding oracle via username-token errors lets attackers recover passwords. Patch status unknown, check vendor advisory. https://radar.offseq.com/threat/cve-2026-60007-cwe-204-in-eclipse-foundation-eclipse-milo-bf23a775f0392e71 #OffSeq #Ecl...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3msb4o36xrd2i"}, {"timestamp": "2026-08-04T13:30:27.424Z", "date_only": false, "value": "2026-08-04T13:30:27.424467Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117037480022382500", "record": "cve-2026-60007", "field": "creation_timestamp", "uuid": "70988732-13a3-4512-bdc3-1bd7a7deec0e", "content": "Eclipse Milo (0.6.0 \u2013 1.1.4) faces a CRITICAL flaw (CVE-2026-60007): error messages in username-token RSA PKCS#1 v1.5 handling enable padding oracle attacks, risking password compromise. Patch status unclear. https://radar.offseq.com/threat/cve-2026-60007-cwe-204-in-eclipse-foundation-eclipse-milo-bf23a775f0392e71 #OffSeq #EclipseMilo #Vuln #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117037480022382500"}, {"timestamp": "2026-08-04T14:06:28.638Z", "date_only": false, "value": "2026-08-04T14:06:28.638587Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fqmspzdd3rxxd", "record": "CVE-2026-60007", "field": "creation_timestamp", "uuid": "bc7557e8-b09b-4df1-8f41-9a2bbef47048", "content": "CVE-2026-60007 - Eclipse Milo Username Token Padding Oracle Vulnerability\nCVE ID : CVE-2026-60007\n \n Published : Aug. 4, 2026, 1:18 p.m. | 27\u00a0minutes ago\n \n Description : In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/fqmspzdd3rxxd"}, {"timestamp": "2026-08-04T14:19:31.655Z", "date_only": false, "value": "2026-08-04T14:19:31.655624Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-60007", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-04T14:19:31.655Z", "date_only": false, "value": "2026-08-04T14:19:31.655624Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-60007", "record": "FKIE_CVE-2026-60007", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-04T15:02:43.092Z", "date_only": false, "value": "2026-08-04T15:02:43.092Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-60007", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T15:02:43.092Z", "date_only": false, "value": "2026-08-04T15:02:43.092Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-60007", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T15:32:22Z", "date_only": false, "value": "2026-08-04T15:32:22Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-JRJQ-9CMF-3H6F", "record": "GHSA-JRJQ-9CMF-3H6F", "field": "published"}, {"timestamp": "2026-08-05T20:22:16.417Z", "date_only": false, "value": "2026-08-05T20:22:16.417", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-60007", "record": "FKIE_CVE-2026-60007", "field": "lastModified"}, {"timestamp": "2026-08-05T21:31:34Z", "date_only": false, "value": "2026-08-05T21:31:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-JRJQ-9CMF-3H6F", "record": "GHSA-JRJQ-9CMF-3H6F", "field": "modified"}, {"timestamp": "2026-08-06T09:02:06.601Z", "date_only": false, "value": "2026-08-06T09:02:06.601652Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msfom5cfzi2z", "record": "CVE-2026-60007", "field": "creation_timestamp", "uuid": "2db09973-de9b-427a-a480-2a9008c4ce66", "content": "CVE-2026-60007\nVersions 0.6.0 through 1.1.4 of Eclipse Milo return specific error messages when a user's password is incorrect, allowing an attacker to use this information to guess the password. This means an attacker can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3msfom5cfzi2z"}, {"timestamp": "2026-08-06T09:07:06.874Z", "date_only": false, "value": "2026-08-06T09:07:06.874644Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3msfov63ql22q", "record": "CVE-2026-60007", "field": "creation_timestamp", "uuid": "694488ea-85b4-4f72-9e1c-c168a630e35a", "content": "\ud83d\udccc CVE-2026-60007 - In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and other a... https://www.cyberhub.blog/cves/CVE-2026-60007", "url": "https://bsky.app/profile/cyberhub.blog/post/3msfov63ql22q"}, {"timestamp": "2026-10-14T20:51:56.287Z", "date_only": false, "value": "2026-10-14T20:51:56.287812Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-288-01", "record": "ICSA-26-288-01", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T05:00:00Z", "date_only": false, "value": "2026-10-15T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01", "record": "CVE-2026-60007", "field": "creation_timestamp", "uuid": "a9ad9143-8aca-4056-9c19-132f1ee494f8", "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01"}, {"timestamp": "2026-10-15T06:00:00Z", "date_only": false, "value": "2026-10-15T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-288-01", "record": "ICSA-26-288-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-15T06:00:00Z", "date_only": false, "value": "2026-10-15T06:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-288-01", "record": "ICSA-26-288-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-15T06:00:00Z", "date_only": false, "value": "2026-10-15T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-288-01", "record": "ICSA-26-288-01", "field": "document.tracking.current_release_date"}]}