CVE-2026-6899CWE-299

Improper Check for Certificate Revocation in S2OPC

Medium · published June 9, 2026

CVSS v3.1
5.6
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It might allow connection between an OPC UA client and server using a revoked certificate.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.2th percentile
Weakness
CWE-299 · Improper Check for Certificate Revocation
Published
2026-06-09T08:39Z
EPSS history
Timeline
  • 09 JUN 08:39Z
    Improper Check for Certificate Revocation in S2OPC
    cvelistv5