CVE-2026-49035: Stack-based Buffer Overflow in MZ Automation libIEC61850
Published Jul 23, 2026
·Updated
The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution (RCE) has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled.
Affected Software
1 affected component
MZ Automation LibIEC61850
Event History
Jul 23, 2026
CVE Published
via MITRE·08:48 PM
Data Sourced
via MITRE·08:48 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Jun 6, 58533
Event
via NVD·07:36 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-49035?
CVE-2026-49035 has a severity rating of 8.1, which is considered high.
2
How do I fix CVE-2026-49035?
To fix CVE-2026-49035, ensure that ASLR is enabled and apply any available patches from MZ Automation.
3
What kind of vulnerability is CVE-2026-49035?
CVE-2026-49035 is classified as a stack-based buffer overflow vulnerability.
4
What are the potential impacts of CVE-2026-49035?
The potential impacts of CVE-2026-49035 include remote code execution, memory corruption, and denial of service.
5
Who is affected by CVE-2026-49035?
CVE-2026-49035 affects users of MZ Automation's LibIEC61850 software.