CVE-2026-48503 | mz-automation libIEC61850 up to 1.6.1 MMS file service mms_file_service.c fileOpen initialPosition information disclosure

October 16, 2026 Yanac

A vulnerability identified as problematic has been detected in mz-automation libIEC61850 up to 1.6.1. This vulnerability affects the function fileOpen of the file src/mms/iso_mms/server/mms_file_service.c of the component MMS file service. The manipulation of the argument initialPosition leads to information disclosure.

This vulnerability is referenced as CVE-2026-48503. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More