VulnSocial

CVE-2026-116014

LOWCVSS 9.2 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDescription() that wraps the 16-bit memSize field for large custom structure definitions. A malicious OPC UA server can supply DataType definitions via UA_Client_getRemoteDataTypes(), causing decodeBinaryStructure() to overflow the heap, crashing clients or enabling code execution.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-190

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-24: 110-24
Full discourse1 post
  • Parameter Watch@ParameterWatch

    ⚠️ CVE-2026-116014 (8.1) ⚠️ open62541, the OPC UA client library, lets a malicious OPC UA server crash a client or run code on it. open62541 1.5.0 up to (but not including) 1.5.7 is affected. Upgrade to 1.5.7. https://t.co/Th51BHMmkt

    1001050
    19 followersView on X

Explore more

Back to dashboard