OPEN62541 Project / o6 Automation GmbH OPEN62541 vulnerabilities

2 CVEs affecting OPEN62541 Project / o6 Automation GmbH OPEN62541, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-11946, published 2026-07-02.

More from OPEN62541 Project / o6 Automation GmbH.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-11946, published 2026-07-02. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthenticated remote attacker can exhaust server memory via the GetEndpoints Discovery Service in open62541. The endpointUrl field of GetEndpointsRequest is not validated for length. An attacker…
• CVE-2026-33592, published 2026-07-02. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An unauthenticated remote attacker can exhaust server memory via the FindServers Discovery Service in open62541. The serverUris field of FindServersRequest is not validated for length or array size.…