CVE-2026-33592

A flaw was found in open62541. An unauthenticated remote attacker can exhaust server memory by sending an arbitrarily large string in the serverUris field of the FindServersRequest, which is part of the FindServers Discovery Service. The server buffers these large strings indefinitely, leading to...