CVE-2026-51537

CriticalCVSS 9.1/10Last modified Aug 11, 2026

Description

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04eThird Party Advisory
https://github.com/EIPStackGroup/OpENer/issues/564Exploit, Issue Tracking, Vendor Advisory
https://github.com/EIPStackGroup/OpENer/issues/564Exploit, Issue Tracking, Vendor Advisory

Timeline

Published: Jul 13, 2026
Last modified: Aug 11, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-515389.1EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions CVE-2026-515397.5A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. The issue stems from imprope CVE-2026-51548.8A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. The impacted element is the function fromSetCfm of the file /goform/setcfm of the CVE-2026-515409.8OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the pr CVE-2026-515419.1OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged CVE-2026-51558.8A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function fromAdvSetWan of the file /goform/AdvSetWan of the component Para CVE-2026-51568.8A vulnerability was determined in Tenda CH22 1.0.0.1. This impacts the function formQuickIndex of the file /goform/QuickIndex of the compone CVE-2026-515644.9An issue in the redirect parameter in Milk admin <=0.9.8 allows remote attackers to redirect users to arbitrary external URLs via a crafted CVE-2026-515656.1Cross-site scripting (XSS) vulnerability in Modules/Docs/DocsController.php in Milk admin <=0.9.8 allows remote attackers to inject arbitrar CVE-2026-515688.1modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file.CVE-2026-51574.3A vulnerability was identified in code-projects Online Food Ordering System 1.0. Affected is an unknown function of the file /form/order.php CVE-2026-515708.1modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file.