PatchTheCVEopener vulnerabilities and fixes
Recent CVEs affecting opener, with upgrade or downgrade steps. 5 tracked.
opener has 5 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-07-13. Highest priority: CVE-2026-51540 (score 59/100).
- CVE-2026-51536 CRITICAL 9.1 DOWNGRADE In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the l
- CVE-2026-51537 CRITICAL 9.1 DOWNGRADE EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of
- CVE-2026-51538 CRITICAL 9.1 DOWNGRADE EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its hand
- CVE-2026-51540 CRITICAL 9.8 DOWNGRADE OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by
- CVE-2026-51541 CRITICAL 9.1 DOWNGRADE OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed e
FAQ
How do I fix opener vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is opener being exploited right now?
None of the tracked opener CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which opener CVE should I patch first?
CVE-2026-51540 currently ranks highest (59/100): OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by .