CVE-2026-63559: o6 Automation OPEN62541

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to read out-of-bounds heap memory, potentially disclosing sensitive information.

Affected products

• o6 Automation OPEN62541: from 1.3.0, up to and including 1.3.17; from 1.4.0, up to and including 1.4.16; from 1.5.0, up to and including 1.5.4

Published 2026-07-30. Last modified 2026-09-03.