CVE-2026-78049

Name of the Vulnerable Software and Affected Versions Systerel S2OPC versions prior to 1.7.4

Description An out-of-bounds read can be triggered remotely within the AddNodes Service component. The issue exists in the SOPC NodeMgtHelperInternal AddVariableNodeAttributes() function located in the src/ClientServer/address space/internal/sopc node mgt helper internal.c file. This occurs when the UserAccessLevel argument is manipulated. The attack requires a high degree of complexity and is considered difficult to execute.

Recommendations Install the patch with identifier aafbd37d381b618312ebdf5ddf57027f62c14fdd for versions prior to 1.7.4.