MZ Automation GmbH libiec61850

July 30, 2026 · CISA (US-CERT) · Severity: CRITICAL

MZ Automation libiec61850 contains multiple out-of-bounds read vulnerabilities affecting the GOOSE subscriber component. An unauthenticated attacker can send specially crafted multicast frames to trigger a heap out-of-bounds read, leading to a denial-of-service condition. The vendor advises updating to version 1.6.2.