AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-67870

CRITICAL · CVSS 9.8 EPSS 0.58% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-06 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The AddReferences implementation in open62541 v1.5.5 has an incomplete validation flaw that allows remote attackers to exploit the server by sending a malformed AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex. This vulnerability can lead to potential null pointer dereferences, which may result in server crashes or undefined behavior. Organizations using this version of open62541 should prioritize patching to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗ github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-67870
Severity
CRITICAL
CVSS
9.8
EPSS
0.58%

Original NVD Description

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node pointer to remain NULL while execution continues.