VulnSocial

CVE-2026-90782General

LOWCVSS 6.0 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions with both data-change and event notifications to cause the server process to terminate.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-14: 109-14
Signal classification1 categories
General
1100.0%
Referenced assets1 URL
Full discourse1 post
  • cybrmonk@cybr_monk
    General

    CVE-2026-90782 Lets Attackers Crash S2OPC Servers With a Single Repo-Hosted Exploit https://cybrmonk.com/blog/cve-2026-90782-lets-attackers-crash-s2opc-servers-with-a-single-repo-hosted-exploit #cybersecurity #threatintelligence https://t.co/eehUGY41R0

    Post summary

    The tweet highlights CVE-2026-90782 and its exploit potential via a repo-hosted method but lacks specific technical details, named tools, or remediation actions. The focus is on the vulnerability itself without strong indicators for other categories.

    0000051
    47 followersView on X

Explore more

Back to dashboard