Uncontrolled Resource Consumption

Records the NVD classes as Uncontrolled Resource Consumption (CWE-400), highest CVSS first.

1. HIGH 7.5CVE-2026-67862public PoC2026-08-04

   open62541 1.5.5 contains a buffer-overflow in the high-level attribute reading logic in src/client/ua_client_highlevel.c. This allows a remote attacker to cause a denial of service.

   AI risk analysis on Exploit-DB.ai →

2. HIGH 7.5CVE-2026-67861public PoC2026-08-04

   An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the UA_Client_getRemoteDataTypes component

   AI risk analysis on Exploit-DB.ai →

3. HIGH 7.5CVE-2026-67856public PoC2026-08-04

   An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via crafted CreateSubscription, CreateMonitoredItems(Sampling), Publish, TransferSubscriptions, and DeleteSubscriptions requests

   AI risk analysis on Exploit-DB.ai →

4. HIGH 7.5CVE-2026-67855public PoC2026-08-04

   open62541 contains a heap use-after-free in the GDS PushManagement certificate update workflow when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled. This allows a remote attacker to cause a denial of service.

   AI risk analysis on Exploit-DB.ai →

5. HIGH 7.5CVE-2026-61387public PoC2026-08-04

   In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exception-safe: if item creation fails with an unchecked error, the server-global reservation is not restored. Deeply nested PubSub ExtensionObjects in a `CreateMonitoredItems…

   milo

   AI risk analysis on Exploit-DB.ai →

6. MEDIUM 6.5CVE-2026-70489public PoC2026-08-04

   Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, automation recurrence parsing in backend/open_webui/utils/automations.py anchored minutely and hourly rules at a fixed date of 2000-01-01 and then wa…

   AI risk analysis on Exploit-DB.ai →