PT-2026-67773

CVE-2026-18784

Published

2026-08-04

Updated

2026-10-24

Description by

CVSS 3.1

5.3

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions open62541 versions prior to 1.5.6

Description A heap-based buffer overflow occurs in the UA Client readNodeClassAttribute() function within the src/client/ua client highlevel.c file. This issue requires local access to be exploited.

Recommendations Update to a version newer than 1.5.5. As a temporary workaround, restrict access to the UA Client readNodeClassAttribute() function to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Chuan Wei

Scu_1Cp

Vull

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer