open62541 vulnerabilities

2 known vulnerabilities in open62541 from open62541 project / o6 Automation. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  open62541: Allocation of Resources Without Limits or Throttling

  CVE-2026-11946Jul 2, 2026open62541 project / o6 Automation

  An unauthenticated remote attacker can exhaust server memory via the GetEndpoints Discovery Service in open62541. The endpointUrl field of GetEndpointsRequest is not validated for length. An attacker can declare an arbitrarily large string (up to ~4.09 GB via

• 7.5 High severity

  open62541: Allocation of Resources Without Limits or Throttling

  CVE-2026-33592Jul 2, 2026open62541 project / o6 Automation

  An unauthenticated remote attacker can exhaust server memory via the FindServers Discovery Service in open62541. The serverUris field of FindServersRequest is not validated for length or array size. An attacker can declare an arbitrarily large string (up to ~3