Security Advisory

CVE-2026-67870

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-05 00:00:00

Last updated 2026-08-06 15:54:03

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId targets. A remote attacker can send a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetNodeId.serverIndex, causing the target node pointer to remain NULL while execution continues.

← Browse all CVEs View on cve.org ↗