CVE-2026-66369— MZ Automation libiec61850 Out-of-bounds Read
Quick assessment
Affected
MZ Automation GmbH libiec61850
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GOOSE 解析器存在一个“差一”边界处理漏洞，该漏洞可通过进程总线上发送的单个未经身份验证的 Layer-2 组播帧触发。当处理特定 GOOSE 消息字段时，解析器错误地推进其内部缓冲区位置，从而导致堆越界读取。在受影响的平台上，此条件可可靠地终止订阅者进程，并导致拒绝服务（DoS）。
Possible ATT&CK Techniques 2 AI
T1203 · Exploitation for Client Execution T1499 · Endpoint Denial of ServiceAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| MZ Automation GmbH | libiec61850 | < 1.6.2 |
affected |
1.6.2 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-66369
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
MZ Automation libiec61850 Out-of-bounds Read
Source: CVE Program / CVE List V5
Vulnerability Description
The GOOSE parser contains an off-by-one boundary-handling flaw that can
be triggered by a single unauthenticated Layer-2 multicast frame on the
process bus. When specific GOOSE message fields are processed, the
parser advances its internal buffer position incorrectly, resulting in a
heap out-of-bounds read. On affected platforms, this condition reliably
terminates the subscriber process and causes a denial-of-service.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| MZ Automation GmbH | libiec61850 | 0 ~ 1.6.2 | - |
|
II. Public POCs for CVE-2026-66369
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-66369
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-66369 (2)
Same Patch Batch · MZ Automation GmbH · 2026-07-30 · 8 CVEs total
| CVE-2026-66360 | 7.5 HIGH | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-66349 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-66364 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-65421 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-56758 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-66720 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
| CVE-2026-63550 | 6.5 MEDIUM | MZ Automation libiec61850 Out-of-bounds Read |
IV. Related Vulnerabilities
Same product: libiec61850
-
CVE-2026-19259
MZ Automation libiec61850 MMS Protocol Workflow iec61850_com -
CVE-2026-19206
MZ Automation libiec61850 ASDU Element sv_subscriber.c SVRec -
CVE-2026-19108
MZ Automation libiec61850 URCB Revalidation reporting.c dele -
CVE-2026-18583
mz-automation libiec61850 MMS Request mms_mapping.c checkDat -
CVE-2026-18582
mz-automation libiec61850 Report Sending Path reporting.c Re
Same vendor: MZ Automation GmbH
Same weakness: CWE-125
-
CVE-2026-104433
Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake -
CVE-2026-79896
Fortra BoKS Manager boks_portmux TLS ClientHello out-of-boun -
CVE-2026-103678
Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via -
CVE-2026-103641
Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr u -
CVE-2026-47544
NVIDIA vGPU Linux越界读取致代码执行漏洞
V. Comments for CVE-2026-66369
No comments yet