Denial of Service in open62541 OPC UA Stack

Publication date: 2026-08-05

Last updated on: 2026-08-05

Assigner: MITRE

Description

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-05

Last Modified

2026-08-05

Generated

2026-08-06

AI Q&A

2026-08-06

EPSS Evaluated

N/A

NVD

CVE-2026-67864

Affected Vendors & Products

Vendor	Product	Version / Range
open62541	open62541	to 1.5.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a denial of service issue in the open62541 library versions 1.5.5 and earlier. It is caused by a flaw in the NodeManagement type-instantiation logic component, which could allow a remote attacker to disrupt service.

Impact Analysis

If exploited, this vulnerability could cause your open62541-based system to become unavailable or unresponsive, leading to service disruptions for applications relying on this library.

Mitigation Strategies

Upgrade open62541 to a version newer than v1.5.5 to address the NodeManagement type-instantiation logic flaw that enables denial of service.

Hi! I’m here to help you understand CVE-2026-67864. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70