CVE-2026-18257

{"id": "CVE-2026-18257", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-18257", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-29T18:04:43.478121Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "cve@gitlab.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 2.2}]}, "affected": [{"source": "cve@gitlab.com", "affectedData": [{"vendor": "Systerel", "product": "S2OPC", "versions": [{"status": "affected", "version": "1.5.0", "lessThan": "2.0.0", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-07-29T17:16:51.540", "references": [{"url": "https://gitlab.com/systerel/S2OPC/-/work_items/1804", "source": "cve@gitlab.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cve@gitlab.com", "description": [{"lang": "en", "value": "CWE-295"}]}], "descriptions": [{"lang": "en", "value": "Improper validity period check for root issuer certificate in CycloneCrypto cryptographic wrapper of S2OPC allows a certificate issued by this root issuer to be considered trusted"}, {"lang": "es", "value": "Comprobaci\u00f3n incorrecta del per\u00edodo de validez para el certificado de emisor ra\u00edz en el envoltorio criptogr\u00e1fico CycloneCrypto de S2OPC permite que un certificado emitido por este emisor ra\u00edz sea considerado de confianza"}], "lastModified": "2026-10-24T13:10:00.147", "sourceIdentifier": "cve@gitlab.com"}