CVE-2026-51537

9.1 criticalEPSS 0.6%

Critical (9.1) in opener project opener. EPSS 0.6% chance of exploitation in the next 30 days.

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2026-07-13
Modified: 2026-08-11
Record from: the NVD, synced 2026-10-19

Affected

opener_project:opener

References

https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e
https://github.com/EIPStackGroup/OpENer/issues/564
https://github.com/EIPStackGroup/OpENer/issues/564

Check your stack JSON