CVE-2026-18784

MEDIUM 5.3

o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UA_Client_readNodeClassAttribute of the file src/client/ua_client_highlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.

CWE	CWE-122 CWE-119
Vendor	o6
Product	open62541
Published	Aug 4, 2026

Stay Ahead of the Next One

Get instant alerts for o6 open62541

Be the first to know when new medium vulnerabilities affecting o6 open62541 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

o6 / open62541

1.5.0 1.5.1 1.5.2 1.5.3 1.5.4 1.5.5

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/385786 vuldb.com: https://vuldb.com/vuln/385786/cti vuldb.com: https://vuldb.com/cve/CVE-2026-18784 vuldb.com: https://vuldb.com/submit/857012 github.com: https://github.com/open62541/open62541/issues/8139 github.com: https://github.com/gff-cw/information/issues/11

Credits

Chuan Wei 🔍 VULL (VulDB User) SCU_1CP (VulDB User) VulDB CNA Team