CVE-2026-63035: o6 Automation OPEN62541

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code.

Affected products

• o6 Automation OPEN62541: from 1.3.0, up to and including 1.3.17; from 1.4.0, up to and including 1.4.16; from 1.5.0, up to and including 1.5.4

Published 2026-07-30. Last modified 2026-09-03.