[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyEA7ywPSOslTaqVbR06-tsOuQ-UFoeIKIhjWoJkUuwg":3},{"article":4,"iocs":36},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":24,"category":25,"article_tags":28},"92027b32-deef-4cb7-9263-9b889b3722dc","o6 Automation open62541","o6-automation-open62541-9f0b44","View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial of service, or potentially execute arbitrary code. The following versions of o6 Automation open62541 are affected: open62541 on Windows and Linux >=from_1.3.0| =from_1.4.0| =from_1.5.0| =from_1.3.0| =from_1.4.0| =from_1.5.0| =from_1.3.0| =from_1.4.0| =from_1.5.0| =from_1.3.0| =from_1.4.0| =from_1.5.0| =from_1.3.0| =from_1.4.0| =from_1.5.0|\u003C=1.5.4, o6 Automation GmbH open62541 on Windows and Linux: master Product Status: known_affected Remediations Mitigation o6 Automation has prepared mitigations and fixes to address these issues and recommends that users update to the newest version. The new version can be obtained by contacting o6 Automation https:\u002F\u002Fwww.o6-automation.com\u002Fcontact or by downloading from the following locations: https:\u002F\u002Fwww.o6-automation.com\u002Fcontact Mitigation https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8235\u002Fcommits\u002Fb666d35769ce63998442e4d0810a3fb10b50179f https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8235\u002Fcommits\u002Fb666d35769ce63998442e4d0810a3fb10b50179f Mitigation https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8236\u002Fcommits\u002F06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60 https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8236\u002Fcommits\u002F06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60 Mitigation https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8237\u002Fcommits\u002F1b71d9c5d9c4d02d4729b8903a52e9f530bf804e https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8237\u002Fcommits\u002F1b71d9c5d9c4d02d4729b8903a52e9f530bf804e Mitigation https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8238\u002Fcommits\u002Fafab4107bfd161da9ce8bb30ed77f3968c9c97df https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8238\u002Fcommits\u002Fafab4107bfd161da9ce8bb30ed77f3968c9c97df Mitigation For more information, see open62541 Security Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or contact o6 Automation: https:\u002F\u002Fwww.o6-automation.com\u002Fcontact https:\u002F\u002Fwww.o6-automation.com\u002Fcontact Relevant CWE: CWE-190 Integer Overflow or Wraparound Metrics CVSS Version Base Score Base Severity Vector String 3.1 7.5 HIGH CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N 4.0 8.7 HIGH CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:N\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N Acknowledgments Asher Davila of Palo Alto Networks reported these vulnerabilities to CISA Abhinav Agarwal reported these vulnerabilities to CISA Legal Notice and Terms of Use This product is provided subject to this Notification (https:\u002F\u002Fwww.cisa.gov\u002Fnotification) and this Privacy & Use policy (https:\u002F\u002Fwww.cisa.gov\u002Fprivacy-policy). Recommended Practices CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and\u002For systems, ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. When remote access is required, use more secure methods, such as virtual private networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most current version available. Also recognize VPN is only as secure as the connected devices. CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures. CISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov\u002Fics. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies. CISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov\u002Fics in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies. Organizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents. No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time. Revision History Initial Release Date: 2026-07-30 Date Revision Summary 2026-07-30 1 Initial Publication Legal Notice and Terms of Use","Multiple vulnerabilities have been identified in o6 Automation's open62541 software, affecting Windows and Linux versions. Successful exploitation could lead to sensitive information disclosure, denial of service, or arbitrary code execution. o6 Automation has released mitigations and fixes, recommending users update to the latest version.","Multiple vulnerabilities in o6 Automation open62541 allow for sensitive info disclosure, DoS, or code execution.","ICS Advisory o6 Automation open62541 Release DateJuly 30, 2026 Alert CodeICSA-26-211-08 Related topics: Industrial Control System Vulnerabilities , Industrial Control Systems View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to disclose sensitive information, cause a denial of service, or potentially execute arbitrary code. The following versions of o6 Automation open62541 are affected: open62541 on Windows and Linux >=from_1.3.0|\u003C=1.3.17 (CVE-2026-63362, CVE-2026-65423, CVE-2026-63035, CVE-2026-63559) open62541 on Windows and Linux >=from_1.4.0|\u003C=1.4.16 (CVE-2026-63362, CVE-2026-65423, CVE-2026-63035, CVE-2026-63559) open62541 on Windows and Linux >=from_1.5.0|\u003C=1.5.4 (CVE-2026-63362, CVE-2026-65423, CVE-2026-63035, CVE-2026-63559) open62541 on Windows and Linux master (CVE-2026-63362, CVE-2026-65423, CVE-2026-63035, CVE-2026-63559) CVSS Vendor Equipment Vulnerabilities v3 8.8 o6 Automation GmbH o6 Automation open62541 Integer Underflow (Wrap or Wraparound), Integer Overflow or Wraparound, Use After Free Background Critical Infrastructure Sectors: Critical Manufacturing, Energy, Transportation Systems Countries\u002FAreas Deployed: Worldwide Company Headquarters Location: Germany Vulnerabilities Expand All + CVE-2026-63362 An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet. View CVE Details Affected Products o6 Automation open62541 Vendor:o6 Automation GmbH Product Version:o6 Automation GmbH open62541 on Windows and Linux: >=from_1.3.0|\u003C=1.3.17, o6 Automation GmbH open62541 on Windows and Linux: >=from_1.4.0|\u003C=1.4.16, o6 Automation GmbH open62541 on Windows and Linux: >=from_1.5.0|\u003C=1.5.4, o6 Automation GmbH open62541 on Windows and Linux: master Product Status:known_affected Remediations Mitigationo6 Automation has prepared mitigations and fixes to address these issues and recommends that users update to the newest version. The new version can be obtained by contacting o6 Automation https:\u002F\u002Fwww.o6-automation.com\u002Fcontact or by downloading from the following locations:https:\u002F\u002Fwww.o6-automation.com\u002Fcontact Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8235\u002Fcommits\u002Fb666d35769ce63998442e4d0810a3fb10b50179fhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8235\u002Fcommits\u002Fb666d35769ce63998442e4d0810a3fb10b50179f Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8236\u002Fcommits\u002F06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8236\u002Fcommits\u002F06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60 Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8237\u002Fcommits\u002F1b71d9c5d9c4d02d4729b8903a52e9f530bf804ehttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8237\u002Fcommits\u002F1b71d9c5d9c4d02d4729b8903a52e9f530bf804e Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8238\u002Fcommits\u002Fafab4107bfd161da9ce8bb30ed77f3968c9c97dfhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8238\u002Fcommits\u002Fafab4107bfd161da9ce8bb30ed77f3968c9c97df MitigationFor more information, see open62541 Security Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or contact o6 Automation: https:\u002F\u002Fwww.o6-automation.com\u002Fcontacthttps:\u002F\u002Fwww.o6-automation.com\u002Fcontact Relevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound) Metrics CVSS Version Base Score Base Severity Vector String 3.1 5.9 MEDIUM CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H 4.0 8.2 HIGH CVSS:4.0\u002FAV:N\u002FAC:H\u002FAT:N\u002FPR:N\u002FUI:N\u002FVC:N\u002FVI:N\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N CVE-2026-65423 An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write. View CVE Details Affected Products o6 Automation open62541 Vendor:o6 Automation GmbH Product Version:o6 Automation GmbH open62541 on Windows and Linux: >=from_1.3.0|\u003C=1.3.17, o6 Automation GmbH open62541 on Windows and Linux: >=from_1.4.0|\u003C=1.4.16, o6 Automation GmbH open62541 on Windows and Linux: >=from_1.5.0|\u003C=1.5.4, o6 Automation GmbH open62541 on Windows and Linux: master Product Status:known_affected Remediations Mitigationo6 Automation has prepared mitigations and fixes to address these issues and recommends that users update to the newest version. The new version can be obtained by contacting o6 Automation https:\u002F\u002Fwww.o6-automation.com\u002Fcontact or by downloading from the following locations:https:\u002F\u002Fwww.o6-automation.com\u002Fcontact Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8235\u002Fcommits\u002Fb666d35769ce63998442e4d0810a3fb10b50179fhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8235\u002Fcommits\u002Fb666d35769ce63998442e4d0810a3fb10b50179f Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8236\u002Fcommits\u002F06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8236\u002Fcommits\u002F06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60 Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8237\u002Fcommits\u002F1b71d9c5d9c4d02d4729b8903a52e9f530bf804ehttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8237\u002Fcommits\u002F1b71d9c5d9c4d02d4729b8903a52e9f530bf804e Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8238\u002Fcommits\u002Fafab4107bfd161da9ce8bb30ed77f3968c9c97dfhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8238\u002Fcommits\u002Fafab4107bfd161da9ce8bb30ed77f3968c9c97df MitigationFor more information, see open62541 Security Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or contact o6 Automation: https:\u002F\u002Fwww.o6-automation.com\u002Fcontacthttps:\u002F\u002Fwww.o6-automation.com\u002Fcontact Relevant CWE: CWE-190 Integer Overflow or Wraparound Metrics CVSS Version Base Score Base Severity Vector String 3.1 8.8 HIGH CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H 4.0 8.7 HIGH CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:H\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N CVE-2026-63035 A heap use-after-free vulnerability in the TransferSubscriptions service in open62541 may allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code. View CVE Details Affected Products o6 Automation open62541 Vendor:o6 Automation GmbH Product Version:o6 Automation GmbH open62541 on Windows and Linux: >=from_1.3.0|\u003C=1.3.17, o6 Automation GmbH open62541 on Windows and Linux: >=from_1.4.0|\u003C=1.4.16, o6 Automation GmbH open62541 on Windows and Linux: >=from_1.5.0|\u003C=1.5.4, o6 Automation GmbH open62541 on Windows and Linux: master Product Status:known_affected Remediations Mitigationo6 Automation has prepared mitigations and fixes to address these issues and recommends that users update to the newest version. The new version can be obtained by contacting o6 Automation https:\u002F\u002Fwww.o6-automation.com\u002Fcontact or by downloading from the following locations:https:\u002F\u002Fwww.o6-automation.com\u002Fcontact Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8235\u002Fcommits\u002Fb666d35769ce63998442e4d0810a3fb10b50179fhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8235\u002Fcommits\u002Fb666d35769ce63998442e4d0810a3fb10b50179f Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8236\u002Fcommits\u002F06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60https:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8236\u002Fcommits\u002F06b99fef667c8ec5bdf0605b4f00c84fcc1d3a60 Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8237\u002Fcommits\u002F1b71d9c5d9c4d02d4729b8903a52e9f530bf804ehttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8237\u002Fcommits\u002F1b71d9c5d9c4d02d4729b8903a52e9f530bf804e Mitigationhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8238\u002Fcommits\u002Fafab4107bfd161da9ce8bb30ed77f3968c9c97dfhttps:\u002F\u002Fgithub.com\u002Fopen62541\u002Fopen62541\u002Fpull\u002F8238\u002Fcommits\u002Fafab4107bfd161da9ce8bb30ed77f3968c9c97df MitigationFor more information, see open62541 Security Advisories SA-2026-0012, SA-2026-0014, and SA-2026-0015 or contact o6 Automation: https:\u002F\u002Fwww.o6-automation.com\u002Fcontacthttps:\u002F\u002Fwww.o6-automation.com\u002Fcontact Relevant CWE: CWE-416 Use After Free Metrics CVSS Version Base Score Base Severity Vector String 3.1 8.1 HIGH CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:H 4.0 7.2 HIGH CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:N\u002FPR:L\u002FUI:N\u002FVC:N\u002FVI:H\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N CVE-2026-63559 An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a","https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-advisories\u002Ficsa-26-211-08",null,"2026-07-30T12:00:00+00:00","2026-07-30T18:01:22.538638+00:00",8,[18,21],{"name":19,"type":20},"open62541","product",{"name":22,"type":23},"o6 Automation GmbH","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":24,"icon":13,"name":26,"slug":27},"Vulnerabilities","vulnerabilities",[29,31],{"category":30},{"id":24,"icon":13,"name":26,"slug":27},{"category":32},{"id":33,"icon":13,"name":34,"slug":35},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[37],{"type":38,"value":39,"context":40},"cve","CVE-2026-63559","Integer overflow vulnerability in UA_Variant arrayDimensions product computation."]