CVE-2026-19108 | MZ Automation libiec61850 up to 1.6.1 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free (Issue 596)

August 6, 2026 Yanac

A vulnerability classified as critical was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mms_mapping/reporting.c of the component URCB Revalidation. The manipulation results in use after free.

This vulnerability was named CVE-2026-19108. The attack needs to be approached locally. In addition, an exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More