CVE-2026-6899

5.6 mediumEPSS 0.1%

Medium (5.6). EPSS 0.1% chance of exploitation in the next 30 days.

Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It might allow connection between an OPC UA client and server using a revoked certificate.

Severity

CVSS 3.1

5.6 medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWE: CWE-299
Published: 2026-06-09
Modified: 2026-07-23
Record from: the NVD, synced 2026-10-19

References

https://gitlab.com/systerel/S2OPC/-/work_items/1739

Check your stack JSON