CVE-2026-67861

Received Received - Intake

Denial of Service in open62541 via UA_Client_getRemoteDataTypes

Publication date: 2026-08-04

Last updated on: 2026-08-05

Assigner: MITRE

Description

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the UA_Client_getRemoteDataTypes component

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-05

Generated

2026-08-06

AI Q&A

2026-08-05

EPSS Evaluated

N/A

NVD

CVE-2026-67861

Affected Vendors & Products

Vendor	Product	Version / Range
open62541	open62541	to 1.5.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service issue in open62541 versions 1.5.5 and earlier. It allows a remote attacker to exploit the UA_Client_getRemoteDataTypes component to cause the system to become unavailable.

Detection Guidance

This vulnerability affects open62541 versions 1.5.5 and earlier. To detect it, check the installed version of open62541 using the command: open62541 --version or by inspecting the library files. If the version is 1.5.5 or below, the system is vulnerable.

Impact Analysis

The vulnerability can lead to service disruption by crashing or overwhelming the affected system, potentially causing downtime for applications relying on open62541.

Compliance Impact

This vulnerability causes a denial of service via the UA_Client_getRemoteDataTypes component, which could disrupt system availability. For compliance with standards like GDPR or HIPAA, availability is a key requirement, so such disruptions may impact adherence to these regulations.

Mitigation Strategies

Upgrade open62541 to a version newer than v1.5.5 to address the denial of service vulnerability in UA_Client_getRemoteDataTypes.

Hi! I’m here to help you understand CVE-2026-67861. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70