Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling. (CVE-2026-67859)

CVE-2026-67859 describes a buffer overflow vulnerability in open62541 version 1.5.5 affecting the Discovery/LDS handling component. This vulnerability can be triggered remotely without authentication, leading to a denial of service (DoS) condition. The CVSS 3.1 base score is 7.5, with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to availability (denial of service). The affected versions explicitly identified are 1.4.11.1-1build1, 1.4.18-1, and 1.4.11.1-1. No patch or remediation information is provided in the source data.

The vulnerability allows a remote attacker to cause a denial of service by exploiting a buffer overflow in the Discovery/LDS handling of open62541. This results in service disruption but does not impact confidentiality or integrity according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting network access to the Discovery/LDS service to trusted sources to reduce exposure.