CVE Catalog
CVE-2026-67868
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.27%
20th percentile - higher than 20% of all known CVEs
Summary
A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processing. This allows a remote attacker to execute arbitrary code.
Risk Assessment
A remote attacker could execute arbitrary code on the server, potentially leading to full system compromise, data theft, or disruption of OPC services.
Recommendation
It is recommended to update S2OPC to the latest version that includes security fixes and restrict access to OPC services.
Original NVD description (English source)
A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processing. This allows a remote attacker to execute arbitrary code.