CVE-2026-15690

Name of the Vulnerable Software and Affected Versions open62541 versions prior to 1.5.6

Description A remote issue exists in the Shared Client Library within the responseReadNamespacesArray() function located in the src/client/ua client connect.c file. Manipulation of the Server NamespaceArray argument can lead to a null pointer dereference, which occurs when a program attempts to read or write to a memory address that is null, typically resulting in a crash.

Recommendations Update to a version newer than 1.5.5. As a temporary workaround, restrict the use of the responseReadNamespacesArray() function to minimize the risk of exploitation.