CVE-2026-51540

opener_project opener: Sicherheitsluecke

criticalEPSS 0.6%

Description

OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData).

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

opener_projectopener

Metrics

9.8
Source: nvd-v3
45.3 %
High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
Show all metrics
Severity
critical
no public PoC known
0.6 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-07-13 22:16 UTC

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. Initial Analysis2026-08-11 16:27 UTC· nvd@nist.gov
    • CPE Configuration: OR *cpe:2.3:a:opener_project:opener:2.3.0:*:*:*:*:*:*:*
    • Reference Type: MITRE: https://gist.github.com/MrAlaskan/5e0c2af7f4a1d188814c7fa8f812c8da Types: Third Party Advisory
    • Reference Type: MITRE: https://github.com/EIPStackGroup/OpENer/issues/568 Types: Exploit, Issue Tracking, Vendor Advisory
    • Reference Type: CISA-ADP: https://github.com/EIPStackGroup/OpENer/issues/568 Types: Exploit, Issue Tracking, Vendor Advisory

Linked advisories