Vulnerabilities

CVSS

5.9 Medium

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Risk score

47.2

Published

2026-07-30

Status

Received

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet.

Weaknesses

CWE-191

Coverage 1

threat-intel

o6 Automation open62541

Multiple vulnerabilities have been identified in o6 Automation open62541, a control system software, potentially allowing for denial of service, arbitrary code execution, and information disclosure. These vulnerabilities…

CISA Advisories · Jul 30, 2026 Critical

CVE-2026-63362CVE-2026-65423CVE-2026-63035vulnerabilitycontrol-systemcisa

All articles mentioning it

Advisories and references

• github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-2...
• github.com/open62541/open62541/pull/8235/commits/b666d35769ce6399844...
• github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf...
• github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d472...
• github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce...
• cisa.gov/news-events/ics-advisories/icsa-26-211-08
• o6-automation.com/contact