CVE-2026-51538

Name of the Vulnerable Software and Affected Versions EIPStackGroup OpENer version 2.3.0 (commit 76b95cf)

Description Incorrect access control exists in the handling of encapsulation sessions. When the server processes critical encapsulation commands, it verifies if the session handle exists in the global session list but does not verify if that handle is associated with the specific TCP connection making the request. The lack of a strong binding between a session handle and its originating socket allows a network attacker to use a valid session handle created by another legitimate client to bypass access controls.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.