What’s Vulnerable › Vulnerabilities

CVE-2026-67872

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-06 · updated 2026-10-24
• Weakness: CWE-400

Description

An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the event monitored-item queue resize handling

References

• https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/src/ClientServer/services/b2c/monitored_item_notification_queue_bs.c
• https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/src/ClientServer/services/bgenc/subscription_core.c
• https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/tests/ClientServer/validation_tests/client/toolkit_test_client_modify_event_queue.c
• https://github.com/systerel/S2OPC/blob/S2OPC_Toolkit_1.7.3/tests/ClientServer/validation_tests/server/toolkit_test_server.c
• https://gitlab.com/systerel/S2OPC/-/work_items/1788
• https://gitlab.com/systerel/S2OPC/-/work_items/1788

Get alerted when CVE-2026-67872 or the next vulnerability affects your stack