CVE-2026-67859

Description

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling.

Overview

State: PUBLISHED
Assigner (CNA): mitre
CVSS severity: HIGH
CVSS score: 7.5 / 10
CVSS vector: CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N
Effective score: 7.5 / 10 HIGH source: CNA overview
CWE(s): —
Reserved: 2026-07-30
Published: 2026-08-04 00:00 UTC
Last updated: 2026-08-04 21:42 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/67xxx/CVE-2026-67859.json
Linked Threat: CVE-2026-67859 — CVE-2026-67859

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-52994

EUVD enrichment is queued; refresh the page in a few seconds.

Affected products (1)

Vendor	Product	Versions	Platforms
n/a	n/a	`n/a` (affected)	—

Vendor references (5)

References embedded in the original CVE record by the assigning CNA.

Web references (0)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

No web references attached yet.

Remediations (10)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

CVE-2026-67859 - Red Hat Customer Portal

web:access.redhat.com

A flaw was found in open62541. A remote attacker can exploit a buffer overflow vulnerability in the Discovery/LDS (Local Discovery Server) handling. This can lead to a denial of service, making the affected system unavailable.

2026-08-06 01:15 UTC
CVE-2026-67859 - open62541 Discovery Service Buffer Overflow

web:cvefeed.io

The following list is the news that have been mention CVE-2026-67859 vulnerability anywhere in the article. Results are limited to the first 20 news articles due to potential performance issues. The following table lists the changes that have been made to the CVE-2026-67859 vulnerability over time.

2026-08-06 01:15 UTC
Security Update Guide - Microsoft Security Response Center

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-08-06 01:15 UTC
CVE-2026-67859 - security-tracker.debian.org

web:security-tracker.debian.org

Vulnerable and fixed packages The table below lists information on source packages.

2026-08-06 01:15 UTC
SAP Security Patch Day - June 2026

web:support.sap.com

SAP security Patch Day Bulletin This post shares the information on security notes that remediate vulnerabilities discovered in SAP products. SAP strongly recommends that the customer visits the support portal and applies patches on priority to protect their SAP landscape. On 9th of June 2026 , SAP security patch day saw the release of 15 new security notes.

2026-08-06 01:15 UTC
CVE-2026-67859 - High | TridentStack

web:tridentstack.com

CVE-2026-67859 has a CVSS v3 base score of 7.5, rated high. CVSS rates the technical impact if the vulnerability is exploited, not how likely that is, so weigh it alongside the exploit-prediction score when you decide what to patch first.

2026-08-06 01:15 UTC
CVE-2026-67859 - vulnerability database | Vulners.com

web:vulners.com

Technical details for CVE-2026-67859 are not publicly available in the provided documents; monitor for updates.

2026-08-06 01:15 UTC
CISA Urges SharePoint Hardening After New Exploitations

web:www.cisa.gov

CISA urges organizations to detect and remediate a potential compromise by implementing the following recommendations: Apply the latest patches and security updates from Microsoft, verify that installation completes successfully, and shorten patching cycles when possible. Verify that Antimalware Scan Interface (AMSI) integration is enabled for each SharePoint web application. Follow Microsoft ...

2026-08-06 01:15 UTC
CVE-2026-67859: | Miggo

web:www.miggo.io

Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling.

2026-08-06 01:15 UTC
Oracle Critical Security Patch Update Advisory - June 2026

web:www.oracle.com

Additional CVEs addressed are: The patch for CVE - 2026 -34481 also addresses CVE - 2026 -34477, CVE - 2026 -34478, CVE - 2026 -34479, and CVE - 2026 -34480. Oracle Fusion Middleware Risk Matrix This Critical Security Patch Update contains 106 new security patches for Oracle Fusion Middleware. 53 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a ...

2026-08-06 01:15 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-67859.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Discovery/LDS handling."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AC:L/AV:N/A:H/C:N/I:N/PR:N/S:U/UI:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-04T21:42:06.781Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://github.com/open62541/open62541/blob/master/src/server/ua_services_discovery.c"
        },
        {
          "url": "https://github.com/open62541/open62541/blob/master/src/server/ua_discovery_mdns.c"
        },
        {
          "url": "https://github.com/open62541/open62541/issues/8095"
        },
        {
          "url": "https://github.com/open62541/open62541/blob/master/examples/discovery/server_lds.c"
        },
        {
          "url": "https://github.com/open62541/open62541/blob/master/src/util/ua_util.c"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2026-67859",
    "datePublished": "2026-08-04T00:00:00.000Z",
    "dateReserved": "2026-07-30T00:00:00.000Z",
    "dateUpdated": "2026-08-04T21:42:06.781Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}