CVE-2026-51540 — CRITICAL (9.8)

Vulnerability Description

OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData).

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Opener Project	Opener	2.3.0

Related Weaknesses (CWE)

CWE-191

References

https://gist.github.com/MrAlaskan/5e0c2af7f4a1d188814c7fa8f812c8daThird Party Advisory
https://github.com/EIPStackGroup/OpENer/issues/568ExploitIssue TrackingVendor Advisory
https://github.com/EIPStackGroup/OpENer/issues/568ExploitIssue TrackingVendor Advisory

FAQ

What is CVE-2026-51540?

CVE-2026-51540 is a vulnerability with a CVSS score of 9.8 (CRITICAL). OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData).

How severe is CVE-2026-51540?

CVE-2026-51540 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2026-51540?

Check the references section above for vendor advisories and patch information. Affected products include: Opener Project Opener.