Intel

CVE-2026-51537

opener_project opener: Sicherheitsluecke

criticalEPSS 0.7%

Description

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

Source: NVD (NIST)CVE.org (MITRE)cvelistv5

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

opener_projectopener

Metrics

XIEM Effective CVSS
9.1
Source: nvd-v3
EPSS percentile
49.6 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
KEV status
—
Show all metrics
Severity
critical
Priority score
87.28
Exploit maturity
no public PoC known
CVSS v3
9.1
EPSS score
0.7 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-07-13 22:16 UTC

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. Initial Analysis2026-08-11 16:42 UTC· nvd@nist.gov
    • CPE Configuration: OR *cpe:2.3:a:opener_project:opener:2.3.0:*:*:*:*:*:*:*
    • Reference Type: MITRE: https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04e Types: Third Party Advisory
    • Reference Type: MITRE: https://github.com/EIPStackGroup/OpENer/issues/564 Types: Exploit, Issue Tracking, Vendor Advisory
    • Reference Type: CISA-ADP: https://github.com/EIPStackGroup/OpENer/issues/564 Types: Exploit, Issue Tracking, Vendor Advisory

Linked advisories