CVE-2026-18257

The CycloneCrypto cryptographic wrapper in S2OPC has a vulnerability that improperly validates the validity period of root issuer certificates, potentially allowing untrusted certificates to be accepted as valid. This flaw could lead to unauthorized access or man-in-the-middle attacks, impacting the security of systems relying on this cryptographic implementation. Organizations using S2OPC should prioritize addressing this vulnerability to ensure the integrity of their cryptographic operations.