The vulnerability identified as CVE-2026-9758 in Systerel S2OPC version 1.5.0 involves improper certificate validation (CWE-295). Specifically, the product incorrectly compares certificates against the trusted list, enabling an attacker to present a well-formed but untrusted certificate that the system mistakenly accepts as trusted. This can undermine the authentication process and potentially allow unauthorized access or man-in-the-middle attacks. The CVSS 3.1 base score is 7.3, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability.

An attacker can exploit this vulnerability to bypass certificate trust validation, potentially leading to unauthorized access, data interception, or manipulation within systems relying on S2OPC for secure communications. The improper validation compromises the integrity and confidentiality guarantees expected from certificate-based authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented at this time. Users should monitor Systerel's advisories for updates and consider additional network-level protections until a patch is available.