TI-2026-54290 CVE-2026-78049 · GHSA-cq93-frxj-593v
Systerel S2OPC AddNodes Service sopc_node_mgt_helper_internal.c out-of-bounds
Priority MEDIUM 61
A vulnerability has been found in Systerel S2OPC up to 1.7.3.
Systerel
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Systerel records in CISA KEVNo Systerel vulnerabilities are listed in CISA KEV.
Records
8 records
TI-2026-61689 CVE-2026-90782 · GHSA-wj27-rfm4-9hp4
S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()
Priority MEDIUM 60
S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotification is overwritten by a successful allocation fo…
TI-2026-56960 CVE-2026-82619 · GHSA-x4v2-7pqm-v4jq
Systerel S2OPC subscription_mgr.c use after free
Priority MEDIUM 57
A vulnerability was identified in Systerel S2OPC up to 1.7.3.
TI-2026-56959 CVE-2026-82618 · GHSA-cpqm-m568-8qmx
Systerel S2OPC String Array Range Writing sopc_builtintypes.c set_range_matrix_on_string_array out-of-bounds
Priority MEDIUM 57
A vulnerability was determined in Systerel S2OPC up to 1.7.3.
TI-2026-15394 CVE-2026-18790 · GHSA-xq9j-r58r-r55p
Systerel S2OPC DeleteMonitoredItemsRequest state_machine.c out-of-bounds
Priority MEDIUM 55
A weakness has been identified in Systerel S2OPC up to 1.7.3.
TI-2026-08554 CVE-2026-9758 · GHSA-q89f-427x-5p67
Improper Certificate Validation in S2OPC
Priority LOW 37
Improper comparison with the certificates trusted list in S2OPC allows an attacker well-formed untrusted certificate to be considered trusted
TI-2026-15010 CVE-2026-18257 · GHSA-xph3-r29g-fwfg
Improper Certificate Validation in S2OPC
Priority LOW 24
Improper validity period check for root issuer certificate in CycloneCrypto cryptographic wrapper of S2OPC allows a certificate issued by this root issuer to be considered trusted
TI-2026-06048 CVE-2026-6899 · GHSA-j893-vcpr-rgfc
Improper Check for Certificate Revocation in S2OPC
Priority LOW 24
Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library.