What’s Vulnerable › Vulnerabilities

CVE-2026-82357: RT-Labs AB C-Open CANopen NULL pointer dereference

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-10-01 · updated 2026-10-07
• Weakness: CWE-476

Description

RT-Labs AB C-Open CANopen contains a NULL pointer dereference if the LSS protocol is used to configure the device. An object defined by the user application may not have all required subindexes for object 0x1018. An unauthenticated, remote attacker with access to the CAN bus, through a compromised node for instance, can initiate the LSS protocol on a device with a misconfigured identity object and potentially crash the device. Fixed in 1.1.1.

Affected products

• RT-Labs AB C-Open: before 1.1.1 — fixed in 1.1.1

How to fix

Upgrade to a fixed version: RT-Labs AB C-Open 1.1.1. Check the vendor advisory for mitigations.

References

• https://github.com/rtlabs-com/c-open/releases/tag/public%2Fv1.1.1
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-275-02.json
• https://rt-labs.com/wp-content/uploads/2026/09/RRTL-260929-01.pdf
• https://www.cve.org/CVERecord?id=CVE-2026-82357

Get alerted when CVE-2026-82357 or the next vulnerability affects your stack