CVE-2026-82623: Use After Free in open62541

The vulnerability CVE-2026-82623 affects open62541 versions 1.5.0 to 1.5.5 in the UA_DataValue_backend_copyRange function of the plugins/historydata/ua_history_data_backend_memory.c file. It causes a use-after-free condition, which can be triggered remotely without any privileges or user interaction. Although an exploit is publicly available, the open62541 project has not officially acknowledged this as a security vulnerability and closed the related issue report. No official remediation or patch has been documented.

Successful exploitation of this use-after-free vulnerability could lead to memory corruption, potentially causing application crashes or other undefined behavior. Since the attack vector is remote and requires no privileges or user interaction, it poses a moderate risk to affected systems. However, there is no confirmed evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The open62541 project has not officially recognized this as a security vulnerability and has closed the issue report without providing a fix. Users should monitor official channels for any future updates or patches addressing this issue.