Vulnerability-Lookup

ICSA-26-211-08

Vulnerability from csaf_cisa - Published: 2026-07-30 06:00 - Updated: 2026-07-30 06:00

Summary

o6 Automation open62541

Notes

Legal Notice and Terms of Use: This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).

Advisory Summary: Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial of service, or potentially execute arbitrary code.

Critical infrastructure sectors: Critical Manufacturing, Energy, Transportation Systems

Countries/areas deployed: Worldwide

Company headquarters location: Germany

Recommended Practices: CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.

Recommended Practices: CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.

Recommended Practices: CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.

Recommended Practices: CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.

Recommended Practices: Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.

Recommended Practices: Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.

Recommended Practices: No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.

CVE-2026-63362

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-191 - Integer Underflow (Wrap or Wraparound)

Affected products

Known affected 4 products

Product	Version	Remediation
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.3.0\|<=1.3.17 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.3.0\|<=1.3.17	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.4.0\|<=1.4.16 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.4.0\|<=1.4.16	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.5.0\|<=1.5.4 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.5.0\|<=1.5.4	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: master o6 Automation GmbH / open62541 on Windows and Linux	master	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix

CVE-2026-65423

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 4 products

Product	Version	Remediation
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.3.0\|<=1.3.17 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.3.0\|<=1.3.17	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.4.0\|<=1.4.16 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.4.0\|<=1.4.16	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.5.0\|<=1.5.4 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.5.0\|<=1.5.4	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: master o6 Automation GmbH / open62541 on Windows and Linux	master	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix

CVE-2026-63035

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

CWE-416 - Use After Free

Affected products

Known affected 4 products

Product	Version	Remediation
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.3.0\|<=1.3.17 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.3.0\|<=1.3.17	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.4.0\|<=1.4.16 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.4.0\|<=1.4.16	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.5.0\|<=1.5.4 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.5.0\|<=1.5.4	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: master o6 Automation GmbH / open62541 on Windows and Linux	master	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix

CVE-2026-63559

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-190 - Integer Overflow or Wraparound

Affected products

Known affected 4 products

Product	Version	Remediation
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.3.0\|<=1.3.17 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.3.0\|<=1.3.17	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.4.0\|<=1.4.16 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.4.0\|<=1.4.16	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: >=from_1.5.0\|<=1.5.4 o6 Automation GmbH / open62541 on Windows and Linux	>=from_1.5.0\|<=1.5.4	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix
o6 Automation GmbH open62541 on Windows and Linux: master o6 Automation GmbH / open62541 on Windows and Linux	master	Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix Mitigation fix

References

26 references

URL	Category
https://raw.githubusercontent.com/cisagov/CSAF/de…	self
https://www.cisa.gov/news-events/ics-advisories/i…	self
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-…	external
https://www.cisa.gov/resources-tools/resources/ic…	external
https://www.cisa.gov/sites/default/files/publicat…	external
https://www.cisa.gov/topics/industrial-control-systems	external
https://www.cisa.gov/news-events/ics-alerts/ics-a…	external
https://www.cisa.gov/sites/default/files/recommen…	external
https://www.cisa.gov/news-events/news/targeted-cy…	external
https://www.cisa.gov/secure-our-world/teach-emplo…	external
https://www.cisa.gov/news-events/news/avoiding-so…	external
https://cwe.mitre.org/data/definitions/191.html	external
https://www.cve.org/CVERecord?id=CVE-2026-63362	external
https://www.first.org/cvss/calculator/3.1#CVSS:3.…	external
https://www.first.org/cvss/calculator/4.0#CVSS:4.…	external
https://cwe.mitre.org/data/definitions/190.html	external
https://www.cve.org/CVERecord?id=CVE-2026-65423	external
https://www.first.org/cvss/calculator/3.1#CVSS:3.…	external
https://www.first.org/cvss/calculator/4.0#CVSS:4.…	external
https://cwe.mitre.org/data/definitions/416.html	external
https://www.cve.org/CVERecord?id=CVE-2026-63035	external
https://www.first.org/cvss/calculator/3.1#CVSS:3.…	external
https://www.first.org/cvss/calculator/4.0#CVSS:4.…	external
https://www.cve.org/CVERecord?id=CVE-2026-63559	external
https://www.first.org/cvss/calculator/3.1#CVSS:3.…	external
https://www.first.org/cvss/calculator/4.0#CVSS:4.…	external

Acknowledgments

Palo Alto Networks Asher Davila

Abhinav Agarwal

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Asher Davila"
        ],
        "organization": "Palo Alto Networks",
        "summary": "reported these vulnerabilities to CISA"
      },
      {
        "names": [
          "Abhinav Agarwal"
        ],
        "summary": "reported these vulnerabilities to CISA"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.cisa.gov/news-events/news/traffic-light-protocol-tlp-definitions-and-usage"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy \u0026 Use policy (https://www.cisa.gov/privacy-policy).",
        "title": "Legal Notice and Terms of Use"
      },
      {
        "category": "summary",
        "text": "Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial of service, or potentially execute arbitrary code.",
        "title": "Advisory Summary"
      },
      {
        "category": "other",
        "text": "Critical Manufacturing, Energy, Transportation Systems",
        "title": "Critical infrastructure sectors"
      },
      {
        "category": "other",
        "text": "Worldwide",
        "title": "Countries/areas deployed"
      },
      {
        "category": "other",
        "text": "Germany",
        "title": "Company headquarters location"
      },
      {
        "category": "general",
        "text": "CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov/ics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov/ics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.",
        "title": "Recommended Practices"
      },
      {
        "category": "general",
        "text": "No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.",
        "title": "Recommended Practices"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "central@cisa.dhs.gov",
      "name": "CISA",
      "namespace": "https://www.cisa.gov/"
    },
    "references": [
      {
        "category": "self",
        "summary": "ICS Advisory ICSA-26-211-08 JSON",
        "url": "https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2026/icsa-26-211-08.json"
      },
      {
        "category": "self",
        "summary": "ICSA Advisory ICSA-26-211-08 - Web Version",
        "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/topics/industrial-control-systems"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/ics-alerts/ics-alert-10-301-01"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/news/targeted-cyber-intrusion-detection-and-mitigation-strategies-update-b"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/secure-our-world/teach-employees-avoid-phishing"
      },
      {
        "category": "external",
        "summary": "Recommended Practices",
        "url": "https://www.cisa.gov/news-events/news/avoiding-social-engineering-and-phishing-attacks"
      }
    ],
    "title": "o6 Automation open62541",
    "tracking": {
      "current_release_date": "2026-07-30T06:00:00.000000Z",
      "generator": {
        "date": "2026-07-28T22:45:51.028902Z",
        "engine": {
          "name": "CISA CSAF Generator",
          "version": "1.0.0"
        }
      },
      "id": "ICSA-26-211-08",
      "initial_release_date": "2026-07-30T06:00:00.000000Z",
      "revision_history": [
        {
          "date": "2026-07-30T06:00:00.000000Z",
          "legacy_version": "Initial",
          "number": "1",
          "summary": "Initial Publication"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=from_1.3.0|\u003c=1.3.17",
                "product": {
                  "name": "o6 Automation GmbH open62541 on Windows and Linux: \u003e=from_1.3.0|\u003c=1.3.17",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "open62541 on Windows and Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=from_1.4.0|\u003c=1.4.16",
                "product": {
                  "name": "o6 Automation GmbH open62541 on Windows and Linux: \u003e=from_1.4.0|\u003c=1.4.16",
                  "product_id": "CSAFPID-0002"
                }
              }
            ],
            "category": "product_name",
            "name": "open62541 on Windows and Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=from_1.5.0|\u003c=1.5.4",
                "product": {
                  "name": "o6 Automation GmbH open62541 on Windows and Linux: \u003e=from_1.5.0|\u003c=1.5.4",
                  "product_id": "CSAFPID-0003"
                }
              }
            ],
            "category": "product_name",
            "name": "open62541 on Windows and Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "master",
                "product": {
                  "name": "o6 Automation GmbH open62541 on Windows and Linux: master",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "open62541 on Windows and Linux"
          }
        ],
        "category": "vendor",
        "name": "o6 Automation GmbH"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-63362",
      "cwe": {
        "id": "CWE-191",
        "name": "Integer Underflow (Wrap or Wraparound)"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet.",
          "title": "Vulnerability Summary"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:N/A:N/2026-07-28T06:00:00.000000Z",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "cwe.mitre.org",
          "url": "https://cwe.mitre.org/data/definitions/191.html"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63362"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "o6 Automation has prepared mitigations and fixes to address these issues and recommends that users update to the newest version.  The new version can be obtained by contacting o6 Automation https://www.o6-automation.com/contact or by downloading from the following locations:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://www.o6-automation.com/contact"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df"
        },
        {
          "category": "mitigation",
          "details": "For more information, see open62541 Security Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or contact o6 Automation: https://www.o6-automation.com/contact",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://www.o6-automation.com/contact"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2026-65423",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write.",
          "title": "Vulnerability Summary"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:N/A:N/2026-07-28T06:00:00.000000Z",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "cwe.mitre.org",
          "url": "https://cwe.mitre.org/data/definitions/190.html"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-65423"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "o6 Automation has prepared mitigations and fixes to address these issues and recommends that users update to the newest version.  The new version can be obtained by contacting o6 Automation https://www.o6-automation.com/contact or by downloading from the following locations:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://www.o6-automation.com/contact"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df"
        },
        {
          "category": "mitigation",
          "details": "For more information, see open62541 Security Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or contact o6 Automation: https://www.o6-automation.com/contact",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://www.o6-automation.com/contact"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2026-63035",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "notes": [
        {
          "category": "summary",
          "text": "A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code.",
          "title": "Vulnerability Summary"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:N/A:N/2026-07-28T06:00:00.000000Z",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "cwe.mitre.org",
          "url": "https://cwe.mitre.org/data/definitions/416.html"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63035"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "o6 Automation has prepared mitigations and fixes to address these issues and recommends that users update to the newest version.  The new version can be obtained by contacting o6 Automation https://www.o6-automation.com/contact or by downloading from the following locations:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://www.o6-automation.com/contact"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df"
        },
        {
          "category": "mitigation",
          "details": "For more information, see open62541 Security Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or contact o6 Automation: https://www.o6-automation.com/contact",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://www.o6-automation.com/contact"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2026-63559",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "notes": [
        {
          "category": "summary",
          "text": "An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information.",
          "title": "Vulnerability Summary"
        },
        {
          "category": "details",
          "text": "SSVCv2/E:N/A:Y/2026-07-28T06:00:00.000000Z",
          "title": "SSVC"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0003",
          "CSAFPID-0004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "cwe.mitre.org",
          "url": "https://cwe.mitre.org/data/definitions/190.html"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-63559"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
        },
        {
          "category": "external",
          "summary": "www.first.org",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "o6 Automation has prepared mitigations and fixes to address these issues and recommends that users update to the newest version.  The new version can be obtained by contacting o6 Automation https://www.o6-automation.com/contact or by downloading from the following locations:",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://www.o6-automation.com/contact"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e"
        },
        {
          "category": "mitigation",
          "details": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df"
        },
        {
          "category": "mitigation",
          "details": "For more information, see open62541 Security Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or contact o6 Automation: https://www.o6-automation.com/contact",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ],
          "url": "https://www.o6-automation.com/contact"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0003",
            "CSAFPID-0004"
          ]
        }
      ]
    }
  ]
}

CVE-2026-63035 (GCVE-0-2026-63035)

Vulnerability from cvelistv5 – Published: 2026-07-30 21:56 – Updated: 2026-07-30 21:56

Title

o6 Automation open62541 Use After Free

Summary

A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

7.2 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-416 - Use After Free

Assigner

icscert

References

7 references

URL	Tags
https://www.o6-automation.com/contact
https://github.com/open62541/open62541/pull/8235/…
https://github.com/open62541/open62541/pull/8236/…
https://github.com/open62541/open62541/pull/8237/…
https://github.com/open62541/open62541/pull/8238/…
https://www.cisa.gov/news-events/ics-advisories/i…
https://github.com/cisagov/CSAF/blob/develop/csaf…

Impacted products

1 product

Vendor	Product	Version
o6 Automation	open62541	Affected: 1.3.0 , ≤ 1.3.17 (custom) Affected: 1.4.0 , ≤ 1.4.16 (custom) Affected: 1.5.0 , ≤ 1.5.4 (custom) Affected: master

Credits

Abhinav Agarwal reported this vulnerability to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux"
          ],
          "product": "open62541",
          "vendor": "o6 Automation",
          "versions": [
            {
              "lessThanOrEqual": "1.3.17",
              "status": "affected",
              "version": "1.3.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.4.16",
              "status": "affected",
              "version": "1.4.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.5.4",
              "status": "affected",
              "version": "1.5.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "master"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Abhinav Agarwal reported this vulnerability to CISA."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A heap use-after-free vulnerability in the TransferSubscriptions service\n in open62541 may allow an authenticated attacker to cause a denial of \nservice or potentially execute arbitrary code."
            }
          ],
          "value": "A heap use-after-free vulnerability in the TransferSubscriptions service\n in open62541 may allow an authenticated attacker to cause a denial of \nservice or potentially execute arbitrary code."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "CWE-416 Use After Free",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-30T21:56:04.345Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.o6-automation.com/contact"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df"
        },
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-08.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eo6 Automation has prepared mitigations and fixes to address these \nissues and recommends that users update to the newest version. The new \nversion can be obtained by contacting o6 Automation\u0026nbsp;\u0026nbsp;\u003ca href=\"https://www.o6-automation.com/contact\"\u003ehttps://www.o6-automation.com/contact\u003c/a\u003e\nor by downloading from the \nfollowing locations:\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f\"\u003ehttps://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60\"\u003ehttps://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e\"\u003ehttps://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df\"\u003ehttps://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor more information, see open62541 \nSecurity Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or \ncontact o6 Automation:\u0026nbsp;\u003ca href=\"https://www.o6-automation.com/contact\"\u003ehttps://www.o6-automation.com/contact\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "o6 Automation has prepared mitigations and fixes to address these \nissues and recommends that users update to the newest version. The new \nversion can be obtained by contacting o6 Automation\u00a0\u00a0 https://www.o6-automation.com/contact \nor by downloading from the \nfollowing locations:\n https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f \n https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60 \n https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e \n https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df \n\n\n\n\nFor more information, see open62541 \nSecurity Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or \ncontact o6 Automation:\u00a0 https://www.o6-automation.com/contact"
        }
      ],
      "source": {
        "advisory": "ICSA-26-211-08",
        "discovery": "EXTERNAL"
      },
      "title": "o6 Automation open62541 Use After Free",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-63035",
    "datePublished": "2026-07-30T21:56:04.345Z",
    "dateReserved": "2026-07-27T15:02:47.801Z",
    "dateUpdated": "2026-07-30T21:56:04.345Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63362 (GCVE-0-2026-63362)

Vulnerability from cvelistv5 – Published: 2026-07-30 22:01 – Updated: 2026-07-30 22:01

Title

o6 Automation open62541 Integer Underflow

Summary

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

CWE

CWE-191

Assigner

icscert

References

7 references

URL	Tags
https://www.o6-automation.com/contact
https://github.com/open62541/open62541/pull/8235/…
https://github.com/open62541/open62541/pull/8236/…
https://github.com/open62541/open62541/pull/8237/…
https://github.com/open62541/open62541/pull/8238/…
https://www.cisa.gov/news-events/ics-advisories/i…
https://github.com/cisagov/CSAF/blob/develop/csaf…

Impacted products

1 product

Vendor	Product	Version
o6 Automation	open62541	Affected: 1.3.0 , ≤ 1.3.17 (custom) Affected: 1.4.0 , ≤ 1.4.16 (custom) Affected: 1.5.0 , ≤ 1.5.4 (custom) Affected: master

Credits

Abhinav Agarwal reported this vulnerability to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux"
          ],
          "product": "open62541",
          "vendor": "o6 Automation",
          "versions": [
            {
              "lessThanOrEqual": "1.3.17",
              "status": "affected",
              "version": "1.3.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.4.16",
              "status": "affected",
              "version": "1.4.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.5.4",
              "status": "affected",
              "version": "1.5.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "master"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Abhinav Agarwal reported this vulnerability to CISA."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An unsigned integer underflow in the PubSub signature verification path \nin open62541 may allow a remote attacker to cause a denial of service \nvia a crafted UDP packet."
            }
          ],
          "value": "An unsigned integer underflow in the PubSub signature verification path \nin open62541 may allow a remote attacker to cause a denial of service \nvia a crafted UDP packet."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-191",
              "description": "CWE-191",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-30T22:01:48.523Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.o6-automation.com/contact"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df"
        },
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-08.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eo6 Automation has prepared mitigations and fixes to address these \nissues and recommends that users update to the newest version. The new \nversion can be obtained by contacting o6 Automation\u0026nbsp;\u0026nbsp;\u003ca href=\"https://www.o6-automation.com/contact\"\u003ehttps://www.o6-automation.com/contact\u003c/a\u003e\nor by downloading from the \nfollowing locations:\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f\"\u003ehttps://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60\"\u003ehttps://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e\"\u003ehttps://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df\"\u003ehttps://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor more information, see open62541 \nSecurity Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or \ncontact o6 Automation:\u0026nbsp;\u003ca href=\"https://www.o6-automation.com/contact\"\u003ehttps://www.o6-automation.com/contact\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "o6 Automation has prepared mitigations and fixes to address these \nissues and recommends that users update to the newest version. The new \nversion can be obtained by contacting o6 Automation\u00a0\u00a0 https://www.o6-automation.com/contact \nor by downloading from the \nfollowing locations:\n https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f \n https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60 \n https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e \n https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df \n\n\n\n\nFor more information, see open62541 \nSecurity Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or \ncontact o6 Automation:\u00a0 https://www.o6-automation.com/contact"
        }
      ],
      "source": {
        "advisory": "ICSA-26-211-08",
        "discovery": "EXTERNAL"
      },
      "title": "o6 Automation open62541 Integer Underflow",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-63362",
    "datePublished": "2026-07-30T22:01:48.523Z",
    "dateReserved": "2026-07-27T15:02:47.793Z",
    "dateUpdated": "2026-07-30T22:01:48.523Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-63559 (GCVE-0-2026-63559)

Vulnerability from cvelistv5 – Published: 2026-07-30 21:47 – Updated: 2026-07-30 21:47

Title

o6 Automation open62541 Integer Overflow or Wraparound

Summary

An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CWE

CWE-190

Assigner

icscert

References

7 references

URL	Tags
https://www.o6-automation.com/contact
https://github.com/open62541/open62541/pull/8235/…
https://github.com/open62541/open62541/pull/8236/…
https://github.com/open62541/open62541/pull/8237/…
https://github.com/open62541/open62541/pull/8238/…
https://www.cisa.gov/news-events/ics-advisories/i…
https://github.com/cisagov/CSAF/blob/develop/csaf…

Impacted products

1 product

Vendor	Product	Version
o6 Automation	open62541	Affected: 1.3.0 , ≤ 1.3.17 (custom) Affected: 1.4.0 , ≤ 1.4.16 (custom) Affected: 1.5.0 , ≤ 1.5.4 (custom) Affected: master

Credits

Asher Davila of Palo Alto Networks reported this vulnerability to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux"
          ],
          "product": "open62541",
          "vendor": "o6 Automation",
          "versions": [
            {
              "lessThanOrEqual": "1.3.17",
              "status": "affected",
              "version": "1.3.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.4.16",
              "status": "affected",
              "version": "1.4.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.5.4",
              "status": "affected",
              "version": "1.5.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "master"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Asher Davila of Palo Alto Networks reported this vulnerability to CISA."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An integer overflow in the UA_Variant arrayDimensions product \ncomputation in open62541 may allow a remote attacker to read \nout-of-bounds heap memory, potentially disclosing sensitive information."
            }
          ],
          "value": "An integer overflow in the UA_Variant arrayDimensions product \ncomputation in open62541 may allow a remote attacker to read \nout-of-bounds heap memory, potentially disclosing sensitive information."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-30T21:47:21.231Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.o6-automation.com/contact"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df"
        },
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-08.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eo6 Automation has prepared mitigations and fixes to address these \nissues and recommends that users update to the newest version. The new \nversion can be obtained by contacting o6 Automation\u0026nbsp;\u0026nbsp;\u003ca href=\"https://www.o6-automation.com/contact\"\u003ehttps://www.o6-automation.com/contact\u003c/a\u003e\nor by downloading from the \nfollowing locations:\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f\"\u003ehttps://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60\"\u003ehttps://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e\"\u003ehttps://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df\"\u003ehttps://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor more information, see open62541 \nSecurity Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or \ncontact o6 Automation:\u0026nbsp;\u003ca href=\"https://www.o6-automation.com/contact\"\u003ehttps://www.o6-automation.com/contact\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "o6 Automation has prepared mitigations and fixes to address these \nissues and recommends that users update to the newest version. The new \nversion can be obtained by contacting o6 Automation\u00a0\u00a0 https://www.o6-automation.com/contact \nor by downloading from the \nfollowing locations:\n https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f \n https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60 \n https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e \n https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df \n\n\n\n\nFor more information, see open62541 \nSecurity Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or \ncontact o6 Automation:\u00a0 https://www.o6-automation.com/contact"
        }
      ],
      "source": {
        "advisory": "ICSA-26-211-08",
        "discovery": "EXTERNAL"
      },
      "title": "o6 Automation open62541 Integer Overflow or Wraparound",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-63559",
    "datePublished": "2026-07-30T21:47:21.231Z",
    "dateReserved": "2026-07-27T15:02:47.789Z",
    "dateUpdated": "2026-07-30T21:47:21.231Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-65423 (GCVE-0-2026-65423)

Vulnerability from cvelistv5 – Published: 2026-07-30 21:59 – Updated: 2026-07-30 21:59

Title

o6 Automation open62541 Integer Overflow or Wraparound

Summary

An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CWE

CWE-190

Assigner

icscert

References

7 references

URL	Tags
https://www.o6-automation.com/contact
https://github.com/open62541/open62541/pull/8235/…
https://github.com/open62541/open62541/pull/8236/…
https://github.com/open62541/open62541/pull/8237/…
https://github.com/open62541/open62541/pull/8238/…
https://www.cisa.gov/news-events/ics-advisories/i…
https://github.com/cisagov/CSAF/blob/develop/csaf…

Impacted products

1 product

Vendor	Product	Version
o6 Automation	open62541	Affected: 1.3.0 , ≤ 1.3.17 (custom) Affected: 1.4.0 , ≤ 1.4.16 (custom) Affected: 1.5.0 , ≤ 1.5.4 (custom) Affected: master

Credits

Abhinav Agarwal reported this vulnerability to CISA.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux"
          ],
          "product": "open62541",
          "vendor": "o6 Automation",
          "versions": [
            {
              "lessThanOrEqual": "1.3.17",
              "status": "affected",
              "version": "1.3.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.4.16",
              "status": "affected",
              "version": "1.4.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.5.4",
              "status": "affected",
              "version": "1.5.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "master"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Abhinav Agarwal reported this vulnerability to CISA."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An integer overflow in the UA_Variant arrayDimensions product \ncomputation in open62541 may allow a remote attacker to trigger an \nout-of-bounds write."
            }
          ],
          "value": "An integer overflow in the UA_Variant arrayDimensions product \ncomputation in open62541 may allow a remote attacker to trigger an \nout-of-bounds write."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-190",
              "description": "CWE-190",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-30T21:59:06.093Z",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "url": "https://www.o6-automation.com/contact"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e"
        },
        {
          "url": "https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df"
        },
        {
          "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08"
        },
        {
          "url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-08.json"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eo6 Automation has prepared mitigations and fixes to address these \nissues and recommends that users update to the newest version. The new \nversion can be obtained by contacting o6 Automation\u0026nbsp;\u0026nbsp;\u003ca href=\"https://www.o6-automation.com/contact\"\u003ehttps://www.o6-automation.com/contact\u003c/a\u003e\nor by downloading from the \nfollowing locations:\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f\"\u003ehttps://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60\"\u003ehttps://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e\"\u003ehttps://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e\u003c/a\u003e\u003cbr\u003e\u003ca href=\"https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df\"\u003ehttps://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df\u003c/a\u003e\u003c/p\u003e\n\u003cp\u003eFor more information, see open62541 \nSecurity Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or \ncontact o6 Automation:\u0026nbsp;\u003ca href=\"https://www.o6-automation.com/contact\"\u003ehttps://www.o6-automation.com/contact\u003c/a\u003e\u003c/p\u003e"
            }
          ],
          "value": "o6 Automation has prepared mitigations and fixes to address these \nissues and recommends that users update to the newest version. The new \nversion can be obtained by contacting o6 Automation\u00a0\u00a0 https://www.o6-automation.com/contact \nor by downloading from the \nfollowing locations:\n https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d0810a3fb10b50179f \n https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60 \n https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b8903a52e9f530bf804e \n https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb30ed77f3968c9c97df \n\n\n\n\nFor more information, see open62541 \nSecurity Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or \ncontact o6 Automation:\u00a0 https://www.o6-automation.com/contact"
        }
      ],
      "source": {
        "advisory": "ICSA-26-211-08",
        "discovery": "EXTERNAL"
      },
      "title": "o6 Automation open62541 Integer Overflow or Wraparound",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2026-65423",
    "datePublished": "2026-07-30T21:59:06.093Z",
    "dateReserved": "2026-07-27T15:02:47.797Z",
    "dateUpdated": "2026-07-30T21:59:06.093Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

ICSA-26-211-08

CVE-2026-63035 (GCVE-0-2026-63035)

CVE-2026-63362 (GCVE-0-2026-63362)

CVE-2026-63559 (GCVE-0-2026-63559)

CVE-2026-65423 (GCVE-0-2026-65423)

Tags

Sightings

Nomenclature