CVE-2026-67859

Received Received - Intake

Buffer Overflow in open62541 v1.5.5 via Discovery/LDS

Publication date: 2026-08-04

Last updated on: 2026-08-05

Assigner: MITRE

Description

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-05

Generated

2026-08-16

AI Q&A

2026-08-05

EPSS Evaluated

2026-08-15

NVD

CVE-2026-67859

Affected Vendors & Products

Vendor	Product	Version / Range
open62541	open62541	1.5.5

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This is a buffer overflow vulnerability in open62541 version 1.5.5. It allows a remote attacker to cause a denial of service by exploiting the Discovery/LDS handling mechanism.

Detection Guidance

Detecting this buffer overflow vulnerability in open62541 v1.5.5 requires monitoring for abnormal behavior in Discovery/LDS handling. Check for crashes, high CPU usage, or memory corruption in open62541 processes. Use network traffic analysis tools like Wireshark to inspect OPC UA discovery packets for malformed data.

Impact Analysis

An attacker could exploit this to crash the affected system, leading to service disruption and potential downtime for applications relying on open62541.

Compliance Impact

This vulnerability is a buffer overflow in open62541 v1.5.5 that allows remote attackers to cause denial of service. It does not directly impact data confidentiality or integrity but could disrupt system availability. Compliance impact depends on system role and data processed, but no specific regulatory violations are mentioned in the provided context.

Mitigation Strategies

Immediately upgrade open62541 to a patched version if available. If upgrading is not possible, disable the Discovery/LDS service if not required. Implement network segmentation to limit exposure. Monitor logs for signs of exploitation attempts.

Hi! I’m here to help you understand CVE-2026-67859. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70