Skip to content

CVE-2026-54156

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
August 22, 2026
Last Seen
August 22, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-54156: Unbounded Nonce Cache in node-opcua Causes DoS Vulnerability72.0

A critical vulnerability (CVE-2026-54156) has been identified in the node-opcua server, allowing unauthenticated remote attackers to exhaust server heap memory by exploiting an unbounded nonce cache. This issue affects versions up to 2.165.0, with a CVSS score of 7.5 (High). The vulnerability arises...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

DDoSDenial of ServiceCWE-770 - Allocation of Resources Without Limits or ThrottlingNode-opcua