Skip to content
CVE-2026-116014 Discovered in open62541 Library

CVE-2026-116014 Discovered in open62541 Library

First seen 24 Oct 2026, 16:14 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 24, 2026 at 17:14 UTC
  • •CVE-2026-116014 is rated CVSS 9.2, indicating critical severity.
  • •The vulnerability allows for potential client crashes or code execution via malicious OPC UA servers.
  • •Organizations using open62541 versions 1.5.0 to 1.5.6 are urged to upgrade immediately.

A vulnerability, CVE-2026-116014, has been identified in open62541 versions 1.5.0 through 1.5.6, allowing an integer overflow in UA_DataType_fromStructureDescription(). This flaw can be exploited by a malicious OPC UA server to supply harmful DataType definitions, leading to potential heap overflow, client crashes, or unauthorized code execution. Organizations utilizing this library in OPC UA clients or industrial applications are particularly at risk, especially if they connect to untrusted servers. The vulnerability has a CVSS score of 9.2, indicating a high priority for remediation. No active exploitation has been confirmed at this time, but the potential impact on confidentiality, integrity, and availability is significant. Immediate action is recommended, including upgrading to version 1.5.7 or later and restricting client connections to trusted servers.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-24
CVE-2026-116014 published
CVE-2026-116014 disclosed, detailing an integer overflow vulnerability in open62541 affecting versions 1.5.0 to 1.5.6.
Redpacketsecurity
2026-10-24
CVE-2026-116014 CVSS score assigned
The vulnerability was assigned a CVSS score of 9.2, classifying it as critical.
Sploitus

More articles in this cluster (6)

Following this threat?

Track CVE-2026-116014 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 3

Common questions

Which versions of open62541 are affected?
Versions 1.5.0 to 1.5.6 of open62541 are affected by CVE-2026-116014.
What should organizations do to mitigate this vulnerability?
Organizations should upgrade to version 1.5.7 or later and restrict client connections to trusted OPC UA servers.
Is there any confirmed exploitation of this vulnerability?
No active exploitation has been confirmed at this time, but the potential for exploitation exists.