CVE‑2026‑18288: OriginLab OriginPro OPJU File Parsing Out‑Of‑Bounds Write Enables Remote Code Execution
What It Is — OriginLab OriginPro’s parser for OPJU files fails to validate the size of user‑supplied data, resulting in an out‑of‑bounds write. An attacker who convinces a user to open a crafted OPJU file can execute arbitrary code in the context of the OriginPro process.
Exploitability — CVSS 7.8 (High). Exploit requires user interaction (opening a malicious file or visiting a malicious page). No public exploit code is known, but the vulnerability is fully disclosed and vendor‑issued patches are available.
Affected Products — OriginLab OriginPro (all versions prior to the August 2026 security update).
Why It Matters for Compliance & Audit Readiness
- Control Mapping – The flaw maps directly to SOC 2 CC6.1 (System Operations) and CC7.1 (Change Management); evidence of timely patching is required to demonstrate control effectiveness.
- Continuous Monitoring – Unpatched installations constitute a control gap that must be surfaced by automated vulnerability‑scanning tools and logged for audit review.
- Defensible Audit Trail – Documented remediation (patch version, deployment date, verification) provides the audit‑ready artifacts that enterprise buyers now demand.
Recommended Actions
- Deploy OriginLab’s August 2026 patch to all OriginPro endpoints immediately.
- Update your asset inventory and vulnerability‑management platform to flag OriginPro installations and track CVE‑2026‑18288 remediation status.
- Record the patch rollout in your change‑management system and retain logs as SOC 2 evidence.
Source: Zero Day Initiative advisory