Tag
#node-opcua
node-opcua RBAC Bypass: Anonymous Writes to OPC UA (CVE-2026-95860)
node-opcua ignores namespace default role permissions, so anonymous OPC UA clients can write variables and call methods; fixed in 2.180.0.
Nov 11, 2026
Tag
node-opcua ignores namespace default role permissions, so anonymous OPC UA clients can write variables and call methods; fixed in 2.180.0.
Nov 11, 2026