CVE-2026-6899 — MEDIUM (5.6)

Vulnerability Description

Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It might allow connection between an OPC UA client and server using a revoked certificate.

CVSS Score

5.6

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Related Weaknesses (CWE)

CWE-299

References

https://gitlab.com/systerel/S2OPC/-/work_items/1739

FAQ

What is CVE-2026-6899?

CVE-2026-6899 is a vulnerability with a CVSS score of 5.6 (MEDIUM). Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It might allow connectio...

How severe is CVE-2026-6899?

CVE-2026-6899 has been rated MEDIUM with a CVSS base score of 5.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-6899?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.