CVE-2026-67855
Description
A flaw was found in open62541. This heap use-after-free vulnerability, occurring in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled, allows a remote attacker to cause a denial of service (DoS). This could lead to the affected system becoming unavailable.
Statement
This vulnerability is rated as Important severity because an unauthenticated remote attacker can cause an immediate server crash across the network without requiring user interaction or elevated privileges. Exploitation specifically depends on the application being built and configured with the Global Discovery Server (GDS) push management certificate updating feature. Red Hat Enterprise Linux does not distribute the open62541 package, limiting exposure exclusively to Fedora community environments.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
