CVE-2026-63362

Description

An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet.

Affected Platforms

Weakness Type

CWE-191

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-21…
• https://github.com/open62541/open62541/pull/8235/commits/b666d35769ce63998442e4d…
• https://github.com/open62541/open62541/pull/8236/commits/06b99fef667c8ec5bdf0605…
• https://github.com/open62541/open62541/pull/8237/commits/1b71d9c5d9c4d02d4729b89…
• https://github.com/open62541/open62541/pull/8238/commits/afab4107bfd161da9ce8bb3…
• https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-08