CVE-2026-51537 Memory corruption in n/a

Critical 9.1 Published 13 Jul 2026 Updated 14 Jul 2026

Remote attackers can trigger out-of-bounds reads in OpENer via malformed CIP ForwardOpen requests, potentially causing crashes or data exposure.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-51537?

CVE-2026-51537 is a critical memory corruption vulnerability in n/a, published on 13 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

Weakness: CWE-125

Which versions are affected by CVE-2026-51537?

It affects 1 product.

Products include Opener Project Opener.

How do I fix CVE-2026-51537?

No fix has been published for CVE-2026-51537 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2026-51537 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-51537 exists.

Sources

Also known as GHSA-7wpf-vhm2-3mpw.