CISA Advisory ICSAS-26-211-10: MZ Automation libiec61850 Out-of-bounds Read Vulnerabilities

Vulnerability Overview Vulnerability Name: MZ Automation GmbH libiec61850 Publication Date: July 30, 2026 Alert Code: ICSA-26-211-10 Related Topics: Industrial Control System Vulnerabilities, Industrial Control Systems Scope of Impact Affected Versions: libiec61850 < 1.6.2 CVE Numbers: CVE-2026-66720, CVE-2026-66369, CVE-2026-63550, CVE-2026-65421, CVE-2026-66364, CVE-2026-66349, CVE-2026-56758, CVE-2026-66360 CVSS Score: v3 7.5 Vendor: MZ Automation GmbH Device: MZ Automation GmbH libiec61850 Vulnerability Type: Out-of-bounds Read Remediation Recommended Practices: - Minimize network exposure by ensuring that all control system devices and/or systems are not accessible from the internet. - Place control system networks and remote devices behind firewalls and isolate them from business networks. - When remote access is required, use more secure remote access methods, such as Virtual Private Networks (VPNs), and ensure that VPNs are updated to the latest version. - Conduct appropriate impact analysis and risk assessments to deploy defense measures. - Implement recommended cybersecurity policies to proactively defend ICS assets. - Follow internal procedures to report suspicious malicious activity. - Do not click links or open attachments in unsolicited email messages. - Refer to the information provided by CISA on identifying and avoiding email scams. - Refer to the information provided by CISA on avoiding social engineering and phishing attacks. Additional Information Background: - Critical Infrastructure Sector: Energy - Deployment Countries/Regions: Global - Company Headquarters Location: Germany Acknowledgements: - Arun Babu of the Central Power Research Institute reported these vulnerabilities to CISA. Revision History: - Initial Publication Date: 2026-07-30 - Revision: 1 - Summary: Initial Release Tags Sector: Energy Sector Topics: Industrial Control System Vulnerabilities, Industrial Control Systems Related Links Related Alerts: - Schneider Electric IGSS - Johnson Controls OpenBlue Employee - MikroTik RouterOS - Toptech Systems RCU II+ and Multiload II+ Contact Information CISA Central: 1-844-Say-CISA Email: contact@cisa.dhs.gov Footer CISA.gov: The official website of the U.S. Department of Homeland Security. About CISA: Includes links regarding CISA, the No Fear Act, the White House, budget and performance, the Office of Inspector General, DEIS.gov, privacy policy, FOIA requests, subscriptions, and website feedback.

Goal Reached Thanks to every supporter — we hit 100%!

CISA Advisory ICSAS-26-211-10: MZ Automation libiec61850 Out-of-bounds Read Vulnerabilities