What is CVE-2026-67863?
A server-side use-after-free vulnerability exists in open62541 version 1.5.5 within the local MonitoredItem callback path. The issue occurs because UA_Subscription_localPublish continues to use the UA_Notification after a callback has invoked UA_Server_deleteMonitoredItem, which can be exploited by a local attacker. Affected developers should apply the relevant patch or update the library immediately.
Azərbaycanca: open62541 1.5.5 versiyasında server tərəfində `use-after-free` zəifliyi aşkarlanıb. Bu, `UA_Subscription_localPublish` funksiyasının, callback vasitəsilə `UA_Server_deleteMonitoredItem` çağırıldıqdan sonra belə `UA_Notification` obyektini istifadə etməyə davam etməsi nəticəsində baş verir. Tərtibatçılar dərhal müvafiq yamağı tətbiq etməli və ya kitabxananı yeniləməlidir.
Related CVEs
link basis: same weakness class CWE-416
FAQ2
Which version of open62541 is affected by CVE-2026-67863?
The vulnerability exists in open62541 version 1.5.5.
What is the root cause of CVE-2026-67863?
The vulnerability is caused by a use-after-free where UA_Subscription_localPublish continues to use the UA_Notification after a callback has invoked UA_Server_deleteMonitoredItem.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.