CVE-2026-67863

CVE-2026-67863 affects open62541 1.5.5, where a server-side use-after-free occurs in the local MonitoredItem callback path. The issue arises when UA_Subscription_localPublish continues to use the current UA_Notification after a callback invokes UA_Server_deleteMonitoredItem for the current local ...