CVE-2026-67860

Summary

The flaw is a heap-based buffer overflow in open62541 1.5.5's HistoryRead path when using the default memory backend history database, allowing potential code execution if exploited.

Exploitability

Exploitation requires specific configuration and access to the affected version of open62541, making it moderately difficult but feasible with the right conditions.

Blast radius

If exploited, this vulnerability could lead to full system compromise on devices running the affected software, potentially impacting industrial control systems or other critical infrastructure.

Prioritized remediation

Upgrade to a non-vulnerable version of open62541 or disable the default history database feature until a patch is available.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.