CVE-2026-67855

Name of the Vulnerable Software and Affected Versions open62541 (affected versions not specified)

Description A heap use-after-free occurs in the GDS PushManagement certificate update workflow when the UA ENABLE GDS PUSHMANAGEMENT variable is enabled. This flaw allows a remote attacker to trigger a denial of service. A heap use-after-free is a memory corruption issue where an application continues to use a pointer after the memory it points to has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, disable the UA ENABLE GDS PUSHMANAGEMENT configuration.