https://seclists.org/oss-sec/2026/q3/231: libIEC61850: four MMS/GOOSE memory-safety vulnerabilities, including lab RCE

Q: What are the memory-safety vulnerabilities identified in CVE-2026-49035?

CVE-2026-49035 identifies a memory-safety vulnerability in the MMS handling of libIEC61850 that can be exploited for potential remote code execution.

Q: How can CVE-2026-50039 be mitigated in libIEC61850?

The vulnerability CVE-2026-50039 can be mitigated by upgrading to libIEC61850 version 1.6.2, which includes the necessary fixes.

Q: What is the impact of CVE-2026-50032 on electric substations using libIEC61850?

CVE-2026-50032 poses a risk of memory corruption that could potentially lead to unauthorized access or manipulation of MMS communications in electric substations.

Q: Is there a patch available for CVE-2026-50103 in libIEC61850?

Yes, CVE-2026-50103 has been addressed and a patch is available in the updated version 1.6.2 of libIEC61850.

Q: What versions of libIEC61850 are affected by these vulnerabilities?

All versions prior to v1.6.2 of libIEC61850 are affected by CVE-2026-49035, CVE-2026-50039, CVE-2026-50032, and CVE-2026-50103.

Published Jul 24, 2026

Updated

Affected Software

1 affected component

MZ Automation LibIEC61850>=v1.0.0<v1.6.2

Frequently Asked Questions

What are the memory-safety vulnerabilities identified in CVE-2026-49035?

CVE-2026-49035 identifies a memory-safety vulnerability in the MMS handling of libIEC61850 that can be exploited for potential remote code execution.

How can CVE-2026-50039 be mitigated in libIEC61850?

The vulnerability CVE-2026-50039 can be mitigated by upgrading to libIEC61850 version 1.6.2, which includes the necessary fixes.

What is the impact of CVE-2026-50032 on electric substations using libIEC61850?

CVE-2026-50032 poses a risk of memory corruption that could potentially lead to unauthorized access or manipulation of MMS communications in electric substations.

Is there a patch available for CVE-2026-50103 in libIEC61850?

Yes, CVE-2026-50103 has been addressed and a patch is available in the updated version 1.6.2 of libIEC61850.

What versions of libIEC61850 are affected by these vulnerabilities?

All versions prior to v1.6.2 of libIEC61850 are affected by CVE-2026-49035, CVE-2026-50039, CVE-2026-50032, and CVE-2026-50103.

https://seclists.org/oss-sec/2026/q3/231: libIEC61850: four MMS/GOOSE memory-safety vulnerabilities, including lab RCE

Affected Software

Don't miss critical vulnerabilities

Frequently Asked Questions

What are the memory-safety vulnerabilities identified in CVE-2026-49035?

How can CVE-2026-50039 be mitigated in libIEC61850?

What is the impact of CVE-2026-50032 on electric substations using libIEC61850?

Is there a patch available for CVE-2026-50103 in libIEC61850?

What versions of libIEC61850 are affected by these vulnerabilities?

Company

Resources

Contact

Frequently Asked Questions

What are the memory-safety vulnerabilities identified in CVE-2026-49035?

How can CVE-2026-50039 be mitigated in libIEC61850?

What is the impact of CVE-2026-50032 on electric substations using libIEC61850?

Is there a patch available for CVE-2026-50103 in libIEC61850?

What versions of libIEC61850 are affected by these vulnerabilities?