CVE catalog

CVE-2026-82623

DEBIAN-CVE-2026-82623

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.70% · Oct 25, 2026

A vulnerability was detected in open62541 up to 1.5.5. Affected by this vulnerability is the function UA_DataValue_backend_copyRange of the file plugins/historydata/ua_history_data_backend_memory.c of the component History Backend. The manipulation results in use after free. The attack can be launched remotely. The exploit is now public and may be used. The project closed the issue report, stating that this is not the official way to report a security vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopen62541131.4.11.1-1vulnerable
Debianopen62541131.4.18-1vulnerable
Debianopen62541141.4.11.1-1vulnerable
Debianopen62541141.4.18-1vulnerable

Fixed-version evidence

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [libopen62541-1.4]Affected

    Source package: [open62541]

    Details (2)

    • 1.4.11.1-1 · amd64 · trixie

      Affected

      pypi · open62541 · debian · 13

    • 1.4.11.1-1 · arm64 · trixie

      Affected

      pypi · open62541 · debian · 13

  • [libopen62541-1.4-dev]Affected

    Source package: [open62541]

    Details (2)

    • 1.4.11.1-1 · amd64 · trixie

      Affected

      pypi · open62541 · debian · 13

    • 1.4.11.1-1 · arm64 · trixie

      Affected

      pypi · open62541 · debian · 13

  • [libopen62541-1.4-tools]Affected

    Source package: [open62541]

    Details (2)

    • 1.4.11.1-1 · all · trixie

      Affected

      pypi · open62541 · debian · 13

    • 1.4.11.1-1 · all · trixie

      Affected

      pypi · open62541 · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]