CVE-2026-67858: Buffer Overflow

Published Aug 4, 2026

Updated

Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 request containing many unique discoveryUrls. This allows remote attackers to cause a denial of service.

Affected Software

1 affected component

open62541 open62541=1.5.5

Event History

Aug 4, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverity

Data Sourced

via NVD·10:17 PM

DescriptionSeverity

Frequently Asked Questions

What is the severity of CVE-2026-67858?

CVE-2026-67858 has a severity rating of high with a score of 7.5.

How do I fix CVE-2026-67858?

To mitigate CVE-2026-67858, disable multicast discovery in the Local Discovery Server configuration.

What type of vulnerability is CVE-2026-67858?

CVE-2026-67858 is a buffer overflow vulnerability.

What systems are affected by CVE-2026-67858?

CVE-2026-67858 affects open62541 version 1.5.5 when multicast discovery is enabled.

Can CVE-2026-67858 be exploited remotely?

Yes, an unauthenticated remote attacker can exploit CVE-2026-67858.

CVE-2026-67858: Buffer Overflow

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-67858?

How do I fix CVE-2026-67858?

What type of vulnerability is CVE-2026-67858?

What systems are affected by CVE-2026-67858?

Can CVE-2026-67858 be exploited remotely?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2026-67858?

How do I fix CVE-2026-67858?

What type of vulnerability is CVE-2026-67858?

What systems are affected by CVE-2026-67858?

Can CVE-2026-67858 be exploited remotely?