CVE-2026-18784CWE-119CWE-122

CVE-2026-18784

Medium · published August 4, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UA_Client_readNodeClassAttribute of the file src/client/ua_client_highlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public and could be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-122 · Heap-based Buffer Overflow
Published
2026-08-04T21:16Z
References (6)
https://github.com/gff-cw/information/issues/11 · [email protected]https://github.com/open62541/open62541/issues/8139 · [email protected]https://vuldb.com/cve/CVE-2026-18784 · [email protected]https://vuldb.com/submit/857012 · [email protected]https://vuldb.com/vuln/385786 · [email protected]https://vuldb.com/vuln/385786/cti · [email protected]
EPSS history
Timeline
  • 04 AUG 16:30Z
    o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow
    cvelistv5