CVE-2026-67865

HIGH

CVE: CVE-2026-67865 - S2OPC 1Sign in to save

CVSS

7.5

CVSS v3.1

EPSS

0.4%

Exploit Prediction Score

Published

August 5, 2026

Exploitability

EPSS probability 0.4%

Description

S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling. This allows a remote attacker to cause a denial of service

CWE-125

No package data available.

Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).

https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/src/ClientServer/services/b2c/msg_subscription_publish_ack_bs…
https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/src/ClientServer/services/b2c/msg_subscription_publish_bs.c
https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/src/Common/opcua_types/sopc_encoder.c
https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/tests/ClientServer/CMakeLists.txt
https://gitlab.com/systerel/S2OPC/-/work_items/1785