CVE-2026-63362: o6 Automation OPEN62541

Medium severity, CVSS 5.9. EPSS: 1.8% chance of exploitation in the next 30 days.

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet.

Affected products

• o6 Automation OPEN62541: from 1.3.0, up to and including 1.3.17; from 1.4.0, up to and including 1.4.16; from 1.5.0, up to and including 1.5.4

Published 2026-07-30. Last modified 2026-09-03.