CVE-2026-68906 | MZ Automation libIEC61850 up to 1.6.1 src/mms/iso_acse/acse.c parseUserInformation out-of-bounds

October 16, 2026 Yanac

A vulnerability marked as critical has been reported in MZ Automation libIEC61850 up to 1.6.1. Impacted is the function parseUserInformation of the file src/mms/iso_acse/acse.c. This manipulation causes out-of-bounds read.

This vulnerability is tracked as CVE-2026-68906. The attack is possible to be carried out remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More