{"id":"CVE-2026-67855","published":"2026-08-04T22:17:15.733","lastModified":"2026-08-05T19:17:32.243","description":"open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled. This allows a remote attacker to cause a denial of service.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-400"],"vendors":[],"products":[],"references":[{"url":"https://github.com/open62541/open62541","tags":[]},{"url":"https://github.com/open62541/open62541/blob/master/arch/posix/eventloop_posix.c","tags":[]},{"url":"https://github.com/open62541/open62541/blob/master/examples/encryption/server_encryption.c","tags":[]},{"url":"https://github.com/open62541/open62541/blob/master/src/server/ua_server_internal.h","tags":[]},{"url":"https://github.com/open62541/open62541/blob/master/src/server/ua_server_ns0_gds.c","tags":[]},{"url":"https://github.com/open62541/open62541/issues/8093","tags":[]},{"url":"https://github.com/open62541/open62541/issues/8093","tags":[]}],"exploitRefs":[{"url":"https://github.com/open62541/open62541","tags":[]},{"url":"https://github.com/open62541/open62541/blob/master/arch/posix/eventloop_posix.c","tags":[]},{"url":"https://github.com/open62541/open62541/blob/master/examples/encryption/server_encryption.c","tags":[]},{"url":"https://github.com/open62541/open62541/blob/master/src/server/ua_server_internal.h","tags":[]},{"url":"https://github.com/open62541/open62541/blob/master/src/server/ua_server_ns0_gds.c","tags":[]},{"url":"https://github.com/open62541/open62541/issues/8093","tags":[]},{"url":"https://github.com/open62541/open62541/issues/8093","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw in open62541 allows a remote attacker to cause a denial of service through heap use-after-free in GDS PushManagement certificate update when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled.","exploitability":"Exploitation requires enabling UA_ENABLE_GDS_PUSHMANAGEMENT and could be moderately difficult due to the need for precise timing and control over certificate updates.","blast_radius":"If exploited, this could lead to a denial of service affecting the system's availability.","remediation":"Disable UA_ENABLE_GDS_PUSHMANAGEMENT or update open62541 to a patched version.","tags":["dos","remote","ics"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:55:13.714Z"}}