CVE-2026-51537

EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser to continue reading fields even when request data is insufficient. This issue is remotely triggerable via network traffic and does not require authentication.

• CWE-125

• https://gist.github.com/MrAlaskan/a5fb0fb7765c9df80d28220ed558f04eThird Party Advisory
• https://github.com/EIPStackGroup/OpENer/issues/564Exploit, Issue Tracking, Vendor Advisory
• https://github.com/EIPStackGroup/OpENer/issues/564Exploit, Issue Tracking, Vendor Advisory

Published

Jul 13, 2026

Last Modified

Aug 11, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5149The RTMKit plugin for WordPress is vulnerable to Incorrect A…6.5
• CVE-2026-5150A security vulnerability has been detected in code-projects …7.3
• CVE-2026-5152A vulnerability was detected in Tenda CH22 1.0.0.1. Impacted…8.8
• CVE-2026-5153A flaw has been found in Tenda CH22 1.0.0.1. The affected el…8.8
• CVE-2026-51535In OpENer 2.3.0 (commit 76b95cf), a resource exhaustion (Den…7.5
• CVE-2026-51536In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (…9.1
• CVE-2026-51538EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an …9.1
• CVE-2026-51539A Denial of Service (DoS) vulnerability exists in the receiv…7.5
• CVE-2026-5154A vulnerability has been found in Tenda CH22 1.0.0.1/1.If. T…8.8
• CVE-2026-51540OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnera…9.8
• CVE-2026-51541OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issu…9.1
• CVE-2026-5155A vulnerability was found in Tenda CH22 1.0.0.1. This affect…8.8