PatchTheCVE: openerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-51541: OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed ehttps://patchthecve.com/cve/CVE-2026-51541.htmlhttps://patchthecve.com/cve/CVE-2026-51541.htmlTue, 11 Aug 2026 16:26:41 +0000CRITICAL 9.1: OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size. An attacker can send a valid ENIP SendRRData frame carrying a very short CIP payload whose path_size field claims that many more path words are preCVE-2026-51540: OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by https://patchthecve.com/cve/CVE-2026-51540.htmlhttps://patchthecve.com/cve/CVE-2026-51540.htmlTue, 11 Aug 2026 16:27:15 +0000CRITICAL 9.8: OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData).CVE-2026-51538: EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handhttps://patchthecve.com/cve/CVE-2026-51538.htmlhttps://patchthecve.com/cve/CVE-2026-51538.htmlTue, 11 Aug 2026 16:38:17 +0000CRITICAL 9.1: EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions. When the server processes critical encapsulation commands, it verifies whether the provided session_handle exists in the global session list, but it fails to CVE-2026-51537: EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of https://patchthecve.com/cve/CVE-2026-51537.htmlhttps://patchthecve.com/cve/CVE-2026-51537.htmlTue, 11 Aug 2026 16:42:16 +0000CRITICAL 9.1: EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser CVE-2026-51536: In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the lhttps://patchthecve.com/cve/CVE-2026-51536.htmlhttps://patchthecve.com/cve/CVE-2026-51536.htmlTue, 11 Aug 2026 16:43:37 +0000CRITICAL 9.1: In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across the call stack. Specifically, an upstream length calculated as an int is passed to a downstream function that expects an EipInt16 (a 16-bit sig