Vulnerabilities

CVSS

8.1 High

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Risk score

64.8

Published

2026-07-30

Status

Received

A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code.

Weaknesses

CWE-416

Coverage 1

threat-intel

o6 Automation open62541

Multiple vulnerabilities have been identified in o6 Automation open62541, a control system software, potentially allowing for denial of service, arbitrary code execution, and information disclosure. These vulnerabilities…

CISA Advisories · Jul 30, 2026 Critical

CVE-2026-63362CVE-2026-65423CVE-2026-63035vulnerabilitycontrol-systemcisa

All articles mentioning it

Advisories and references

• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...
• github.com/open62541/open62541/pull/8235/commits/b666d35769ce6399844...
• github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf...
• github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d472...
• github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce...
• cisa.gov/news-events/ics-advisories/icsa-26-211-08
• o6-automation.com/contact