Log in Start free

Vulnerability · Published Aug 31, 2026 · Assigned by VulDB

CVE-2026-82623open62541 History Backend ua_history_data_backend_memory.c UA_DataValue_backend_copyRange use after free

Medium 5.3

In plain English

A medium-severity use-after-free in open62541. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.7%top 46.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backend_copyRange of the file plugins/historydata/ua_history_data_backend_memory.c of the component History Backend. The manipulation results in use after free. The attack can be launched remotely. The exploit is now public and may be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13open62541no fix listedDEBIAN-CVE-2026-82623
Debian:14open62541no fix listedDEBIAN-CVE-2026-82623
Ubuntu:26.04:LTSopen62541no fix listedUBUNTU-CVE-2026-82623
Ubuntu:26.10open62541no fix listedUBUNTU-CVE-2026-82623

Affected products (as reported)

VendorProductVersions
n/a open62541 1.5.01.5.11.5.21.5.31.5.41.5.5

Weakness: CWE-416, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R

References