CVE-2026-51540

CriticalCVSS 9.8

Published: 13/07/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

Summary

OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData).

Risk Assessment

An attacker can remotely trigger memory corruption, potentially leading to system crashes or arbitrary code execution, compromising the integrity and availability of industrial systems.

Recommendation

Immediately update OpENer to a version containing the fix (commit after 76b95cf) or apply available security patches.

Original NVD description (English source)

OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData).