MZ Automation libIEC61850

p a href= https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-204-06.json strong View CSAF /strong /a /p h2 Summary /h2 p strong Successful exploitation of these vulnerabilities could allow an unauthenticated network-adjacent attacker to crash critical IEC 61850 services or execute arbitrary code, disrupting or compromising protection, visibility, and control functions. /strong /p p The following versions of MZ Automation libIEC61850 are affected: /p ul li libIEC61850 gt;=v1.0.0| lt;=v1.6.1 nbsp; /li /ul div class= csaf-table table class= tablesaw tablesaw-stack data-tablesaw-mode= stack data-tablesaw-minimap thead tr th role= columnheader data-tablesaw-priority= persist CVSS /th th role= columnheader Vendor /th th role= columnheader Equipment /th th role= columnheader Vulnerabilities /th /tr /thead tbody tr td v3 8.1 /td td MZ Automation /td td MZ Automation libIEC61850 /td td Stack-based Buffer Overflow, Heap-based Buffer Overflow, Improper Handling of Syntactically Invalid Structure, NULL Pointer Dereference /td /tr /tbody /table /div h3 Background /h3 ul li strong Critical Infrastructure Sectors: /strong Critical Manufacturing, Energy, Transportation Systems /li li strong Countries/Areas Deployed: /strong Worldwide /li li strong Company Headquarters Location: /strong Germany /li /ul hr h2 Vulnerabilities /h2 div class= csaf-accordion p a class= csaf-accordion-toggle-all href= # Expand All + /a /p div class= csaf-accordion-item h3 a class= csaf-accordion-toggle href= # CVE-2026-50039 /a /h3 div class= csaf-accordion-content p The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a ReadRequest. /p p a href= https://www.cve.org/CVERecord?id=CVE-2026-50039 View CVE Details /a /p hr h4 Affected Products /h4 h5 MZ Automation libIEC61850 /h5 div class= ics-vendor-version-status div class= ics-vendor strong Vendor: /strong br MZ Automation /div div class= ics-version strong Product Version: /strong br MZ Automation libIEC61850: gt;=v1.0.0| lt;=v1.6.1 /div div class= ics-status strong Product Status: /strong br known_affected /div /div div class= ics-remediations h6 Remediations /h6 p strong Vendor fix /strong br MZ Automation recommends updating to the latest build of the libIEC61850 standard. Documentation can be found at https://github.com/mz-automation/libiec61850. br a href= https://github.com/mz-automation/libiec61850 https://github.com/mz-automation/libiec61850 /a /p /div p strong Relevant CWE: /strong a href= https://cwe.mitre.org/data/definitions/121.html CWE-121 Stack-based Buffer Overflow /a /p hr h4 Metrics /h4 div class= csaf-table csaf-metrics-table table class= tablesaw tablesaw-stack data-tablesaw-mode= stack data-tablesaw-minimap thead tr th role= columnheader data-tablesaw-priority= persist CVSS Version /th th role= columnheader Base Score /th th role= columnheader Base Severity /th th role= columnheader Vector String /th /tr /thead