CVE-2026-67870

The open62541 C-based library (v1.5.5) is vulnerable to a flaw in the server-side AddReferences implementation. A remote attacker can exploit an incomplete validation of non-local ExpandedNodeId targets by sending a crafted AddReferencesRequest with an empty targetServerUri and a non-zero targetN...