CISA ICSA-26-204-07: MZ Automation lib60870 OOB Read DoS (CVE-2026-16002)

Vulnerability Overview Vulnerability Name: MZ Automation lib60870 Release Date: July 23, 2026 Alert Code: ICSA-26-204-07 Related Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems CVSS Score: 3.8.2 Vendor: MZ Automation Product: MZ Automation lib60870 Vulnerability Type: Out-of-bounds Read CVE ID: CVE-2026-16002 Scope of Impact Critical Infrastructure Sectors: Chemical, Energy, Water, and Wastewater Deployment Countries/Regions: Global Vendor Headquarters Location: Germany Affected Versions: lib60870 <= 2.4.0 Remediation Recommendations Recommended Practices: - Minimize network exposure of all control system devices and/or systems, ensuring they are not accessible via the internet. - Place control system networks and remote devices behind firewalls and isolate them from business networks. - When remote access is required, use more secure remote methods, such as Virtual Private Networks (VPNs), and update to the latest versions. - Conduct appropriate impact analysis and risk assessments before deploying countermeasures. - Implement recommended cybersecurity strategies to proactively defend ICS assets. - Follow internal procedures to report suspicious malicious activity. - Do not click links or open attachments in unsolicited emails. - Refer to other resources provided by CISA, such as guidance on avoiding email scams and social engineering attacks. Additional Information Background: Successful exploitation of this vulnerability may cause a crash in the parsing process, resulting in a denial of service. Acknowledgments: Lars Tray reported this vulnerability to CISA. Revision History: Initial release date is July 23, 2026. Related Links Related Advisories: - Weintek cMT3092X - Johnson Controls C-CURE 9000 and Victor application server - Panduit IntraVUE - MZ Automation libIEC61850 Tags Sectors: Chemical Sector, Energy Sector, Water and Wastewater Systems Topics: Industrial Control Systems Vulnerabilities, Industrial Control Systems Feedback Please share your thoughts; we have recently updated our anonymous product survey and welcome your feedback. Legal Notice and Terms of Use This product is subject to this notice, privacy, and usage policies. Vendor MZ Automation GmbH Related Advisories Weintek cMT3092X Johnson Controls C-CURE 9000 and Victor application server Panduit IntraVUE MZ Automation libIEC61850 Back to Top Topics, Highlights, Resources & Tools, News & Events, Careers, About Social Media Facebook, X, LinkedIn, RSS CISA Central 1-844-Say-CISA contact@cisa.dhs.gov Official Website CISA.gov Official website of the U.S. Department of Homeland Security Other Links About CISA Budget & Performance DHS.gov FOIA Requests No Fear Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback Summary Vulnerability Overview: The MZ Automation lib60870 contains an out-of-bounds read vulnerability that may lead to denial of service. Scope of Impact: Global deployment, affecting the Chemical, Energy, Water, and Wastewater sectors. Remediation Recommendations: Minimize network exposure, use secure remote access methods, conduct risk assessments, implement cybersecurity strategies, follow internal procedures, avoid clicking unsolicited links, and refer to CISA resources.

Goal Reached Thanks to every supporter — we hit 100%!

CISA ICSA-26-204-07: MZ Automation lib60870 OOB Read DoS (CVE-2026-16002)