Denial of Service in open62541

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: MITRE

Description

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitoredItems(Sampling), Publish, TransferSubscriptions, and DeleteSubscriptions requests

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-04

Generated

2026-08-05

AI Q&A

2026-08-05

EPSS Evaluated

N/A

NVD

CVE-2026-67856

Affected Vendors & Products

Vendor	Product	Version / Range
open62541	open62541	to 1.5.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service issue in open62541 versions 1.5.5 and earlier. It allows a remote attacker to disrupt services by sending specially crafted requests such as CreateSubscription, CreateMonitoredItems, Publish, TransferSubscriptions, and DeleteSubscriptions.

Impact Analysis

If exploited, this vulnerability could cause your open62541-based system to become unresponsive or crash, leading to service disruptions. This may affect applications relying on OPC UA communication protocols.

Mitigation Strategies

Upgrade open62541 to a version newer than v1.5.5 to address the DoS vulnerability in subscription-related requests.

Hi! I’m here to help you understand CVE-2026-67856. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70