CVE-2026-67855

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled. This allows a remote attacker to cause a denial of service.

Published 2026-08-04. Last modified 2026-08-31.