CVE-2026-15690 | open62541 up to 1.5.5 Shared Client Library ua_client_connect.c responseReadNamespacesArray Server_NamespaceArray null pointer dereference (Issue 8104)

July 14, 2026 Yanac

A vulnerability described as problematic has been identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua_client_connect.c of the component Shared Client Library. Such manipulation of the argument Server_NamespaceArray leads to null pointer dereference.

This vulnerability is documented as CVE-2026-15690. The attack can be executed remotely. Additionally, an exploit exists.

The project closed the issue report, stating that this is not the official way to report a security vulnerability.VulDB Recent EntriesRead More