Threats tagged 'ghsa-3jmw-8hr3-2j76'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.1%	CVE-2026-67870 · CVE-2026-67870 is a critical Critical9.8EPSS 1.1%2026-08-06CVE Database V5 CVE-2026-67870 is a critical vulnerability in open62541 version 1.5.5 where the server-side AddReferences implementation does not fully validate non-local ExpandedNodeId targets. A remote attacker can exploit this by sending a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing a NULL pointer dereference during execution. EPSS 1.1%Vulnerability CWE-476 #ghsa-3jmw-8hr3-2j76	CVE Database V5	2026-08-06

Page 1 of 1