CVE-2026-18790

Name of the Vulnerable Software and Affected Versions Systerel S2OPC versions prior to 1.7.4

Description A weakness in the DeleteMonitoredItemsRequest Handler component allows for an out-of-bounds read, which occurs when the system reads data outside the intended boundary of a buffer. This issue is located within the LockedStaMac ProcessMsg DeleteMonitoredItemsResponse() function in the file src/ClientServer/frontend/client wrapper/internal/state machine.c. This flaw can only be exploited by a local attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.