What’s Vulnerable › Vulnerabilities

CVE-2026-38719

• Severity: medium (CVSS 6.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-18 · updated 2026-06-17
• Weakness: CWE-125

Description

OpENer v2.3-558-g1e99582 contains an out-of-bounds read vulnerability in the Common Packet Format (CPF) parser, specifically in CreateCommonPacketFormatStructure() in source/src/enet_encap/cpf.c. A crafted ENIP/CPF message can supply an attacker-controlled item_count value that is not consistently validated against the remaining data_length of the CPF slice

References

• https://github.com/EIPStackGroup/OpENer
• https://github.com/EIPStackGroup/OpENer/issues/558
• https://github.com/EIPStackGroup/OpENer/issues/558

Get alerted when CVE-2026-38719 or the next vulnerability affects your stack