CVE-2026-67858CWE-120

CVE-2026-67858

High · published August 5, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
58.0
In the wild
Unconfirmed
What it is

Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 request containing many unique discoveryUrls. This allows remote attackers to cause a denial of service.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00857 · 58.0th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-08-05T02:17Z
References (6)
https://github.com/open62541/open62541/blob/master/doc/building.rst · [email protected]https://github.com/open62541/open62541/blob/master/src/server/ua_discovery_mdns.c · [email protected]https://github.com/open62541/open62541/blob/master/src/server/ua_services_discovery.c · [email protected]https://github.com/open62541/open62541/issues/8094 · [email protected]https://github.com/open62541/open62541/tree/master/examples/discovery · [email protected]https://github.com/open62541/open62541/issues/8094 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 04 AUG 00:00Z
    Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD…
    cvelistv5