CVE-2026-67863

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path. The issue occurs when UA_Subscription_localPublish continues to use the current UA_Notification after a callback invokes UA_Server_deleteMonitoredItem for the current local MonitoredItem. This allows a remote attacker to cause a denial of service.

Published 2026-08-05. Last modified 2026-08-31.