CVE-2026-67858: Buffer Overflow
Published Aug 4, 2026
·Updated
Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 request containing many unique discoveryUrls. This allows remote attackers to cause a denial of service.
Affected Software
1 affected component
open62541 open62541=1.5.5
Event History
Aug 4, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverity
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-67858?
CVE-2026-67858 has a severity rating of high with a score of 7.5.
2
How do I fix CVE-2026-67858?
To mitigate CVE-2026-67858, disable multicast discovery in the Local Discovery Server configuration.
3
What type of vulnerability is CVE-2026-67858?
CVE-2026-67858 is a buffer overflow vulnerability.
4
What systems are affected by CVE-2026-67858?
CVE-2026-67858 affects open62541 version 1.5.5 when multicast discovery is enabled.
5
Can CVE-2026-67858 be exploited remotely?
Yes, an unauthenticated remote attacker can exploit CVE-2026-67858.