CVE-2026-67858

CVE-2026-67858

A flaw was found in open62541. When the Local Discovery Server (LDS) is configured with multicast discovery via the MDNSD backend, an unauthenticated remote attacker can exploit a buffer overflow vulnerability. By sending numerous unique discovery URLs in RegisterServer or RegisterServer2 requests, the attacker can cause the server to crash, leading to a denial of service.

CVE-2026-67858

Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local ...

GHSA-jh69-g63c-w587

Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local Discovery Server (LDS) is built with multicast discovery enabled through the MDNSD backend. An unauthenticated remote attacker can send a RegisterServer or RegisterServer2 request containing many unique discoveryUrls. This allows remote attackers to cause a denial of service.