# MZ Automation Libiec61850 vulnerabilities Source: https://junglewise.ai/threats/technologies/libiec61850 Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/libiec61850.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 21 vulnerabilities in MZ Automation Libiec61850: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-68908, was published on 16 October 2026. 6 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 6 - Last 90 days: 6 - All time: 21 (0 critical, 0 exploited in the wild) ## About MZ Automation Libiec61850 An open-source C implementation of the IEC 61850 protocols for substation automation. ## Latest MZ Automation Libiec61850 vulnerabilities - [CVE-2026-68908: libIEC61850 invalid free in MMS report serialization](https://junglewise.ai/threats/cve-2026-68908-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (medium, CVSS 5.3, published 16 Oct 2026) - [CVE-2026-68907: libIEC61850 buffer over-read in dataset access handler](https://junglewise.ai/threats/cve-2026-68907-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (info, published 16 Oct 2026) - [CVE-2026-68906: libIEC61850 infinite loop in ACSE parseUserInformation](https://junglewise.ai/threats/cve-2026-68906-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (info, published 16 Oct 2026) - [CVE-2026-57446: libIEC61850 MMS ObtainFile double-free denial of service](https://junglewise.ai/threats/cve-2026-57446-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (medium, CVSS 5.3, published 16 Oct 2026) - [CVE-2026-48741: libIEC61850 NULL pointer dereference in MMS read service](https://junglewise.ai/threats/cve-2026-48741-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (high, CVSS 7.5, published 16 Oct 2026) - [CVE-2026-48503: libIEC61850 MMS file service information disclosure](https://junglewise.ai/threats/cve-2026-48503-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (high, CVSS 7.5, published 16 Oct 2026) - [CVE-2026-19259: MZ Automation libiec61850 heap buffer overflow in MmsMapping](https://junglewise.ai/threats/cve-2026-19259-mz-automation-libiec61850-heap-buffer-overflow-in-mmsmapping) (medium, CVSS 5.3, published 8 Aug 2026) - [CVE-2026-18582: mz-automation libiec61850 invalid free in report handling](https://junglewise.ai/threats/cve-2026-18582-mz-automation-libiec61850-invalid-free-in-report-handling) (medium, CVSS 5.3, published 3 Aug 2026) - [CVE-2026-52134: MZ Automation libiec61850 authentication bypass in parseGoosePayload](https://junglewise.ai/threats/cve-2026-52134-mz-automation-libiec61850-authentication-bypass-in) (info, CVSS 0, published 31 Jul 2026) - [CVE-2026-66720: MZ Automation GmbH libiec61850 heap out-of-bounds read in GOOSE subscriber](https://junglewise.ai/threats/cve-2026-66720-mz-automation-gmbh-libiec61850-heap-out-of-bounds-read-in-goose) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-66369: MZ Automation libiec61850 DoS in GOOSE parser](https://junglewise.ai/threats/cve-2026-66369-mz-automation-libiec61850-dos-in-goose-parser) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-66364: MZ Automation GmbH libiec61850 out-of-bounds read in GOOSE parser](https://junglewise.ai/threats/cve-2026-66364-mz-automation-gmbh-libiec61850-out-of-bounds-read-in-goose-parser) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-66360: MZ Automation libiec61850 out-of-bounds read in ISO Presentation layer](https://junglewise.ai/threats/cve-2026-66360-mz-automation-libiec61850-out-of-bounds-read-in-iso-presentation) (high, CVSS 7.5, published 30 Jul 2026) - [CVE-2026-66349: MZ Automation libiec61850 heap out-of-bounds read in MMS server](https://junglewise.ai/threats/cve-2026-66349-mz-automation-libiec61850-heap-out-of-bounds-read-in-mms-server) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-65421: MZ Automation libiec61850 heap out-of-bounds read in MMS BER decoder](https://junglewise.ai/threats/cve-2026-65421-mz-automation-libiec61850-heap-out-of-bounds-read-in-mms-ber) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-63550: MZ Automation GmbH libiec61850 heap out-of-bounds read in MMS BER decoder](https://junglewise.ai/threats/cve-2026-63550-mz-automation-gmbh-libiec61850-heap-out-of-bounds-read-in-mms-ber) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-56758: MZ Automation GmbH libiec61850 out-of-bounds read in ACSE layer](https://junglewise.ai/threats/cve-2026-56758-mz-automation-gmbh-libiec61850-out-of-bounds-read-in-acse-layer) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-50103: MZ Automation libIEC61850 NULL pointer dereference in GOOSE parser](https://junglewise.ai/threats/cve-2026-50103-mz-automation-libiec61850-null-pointer-dereference-in-goose) (medium, CVSS 6.5, published 23 Jul 2026) - [CVE-2026-50039: MZ Automation libIEC61850 stack-based buffer overflow via Read Request](https://junglewise.ai/threats/cve-2026-50039-mz-automation-libiec61850-stack-based-buffer-overflow-via-read) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-50032: MZ Automation libIEC61850 NULL pointer dereference in MMS handler](https://junglewise.ai/threats/cve-2026-50032-mz-automation-libiec61850-null-pointer-dereference-in-mms-handler) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-49035: MZ Automation libIEC61850 heap overflow in MMS Initiate request](https://junglewise.ai/threats/cve-2026-49035-mz-automation-libiec61850-heap-overflow-in-mms-initiate-request) (high, CVSS 8.1, published 23 Jul 2026) ## Most severe MZ Automation Libiec61850 vulnerabilities - [CVE-2026-49035: MZ Automation libIEC61850 heap overflow in MMS Initiate request](https://junglewise.ai/threats/cve-2026-49035-mz-automation-libiec61850-heap-overflow-in-mms-initiate-request) (high, CVSS 8.1, published 23 Jul 2026) - [CVE-2026-48741: libIEC61850 NULL pointer dereference in MMS read service](https://junglewise.ai/threats/cve-2026-48741-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (high, CVSS 7.5, published 16 Oct 2026) - [CVE-2026-48503: libIEC61850 MMS file service information disclosure](https://junglewise.ai/threats/cve-2026-48503-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (high, CVSS 7.5, published 16 Oct 2026) - [CVE-2026-66360: MZ Automation libiec61850 out-of-bounds read in ISO Presentation layer](https://junglewise.ai/threats/cve-2026-66360-mz-automation-libiec61850-out-of-bounds-read-in-iso-presentation) (high, CVSS 7.5, published 30 Jul 2026) - [CVE-2026-50039: MZ Automation libIEC61850 stack-based buffer overflow via Read Request](https://junglewise.ai/threats/cve-2026-50039-mz-automation-libiec61850-stack-based-buffer-overflow-via-read) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-50032: MZ Automation libIEC61850 NULL pointer dereference in MMS handler](https://junglewise.ai/threats/cve-2026-50032-mz-automation-libiec61850-null-pointer-dereference-in-mms-handler) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-66720: MZ Automation GmbH libiec61850 heap out-of-bounds read in GOOSE subscriber](https://junglewise.ai/threats/cve-2026-66720-mz-automation-gmbh-libiec61850-heap-out-of-bounds-read-in-goose) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-66369: MZ Automation libiec61850 DoS in GOOSE parser](https://junglewise.ai/threats/cve-2026-66369-mz-automation-libiec61850-dos-in-goose-parser) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-66364: MZ Automation GmbH libiec61850 out-of-bounds read in GOOSE parser](https://junglewise.ai/threats/cve-2026-66364-mz-automation-gmbh-libiec61850-out-of-bounds-read-in-goose-parser) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-66349: MZ Automation libiec61850 heap out-of-bounds read in MMS server](https://junglewise.ai/threats/cve-2026-66349-mz-automation-libiec61850-heap-out-of-bounds-read-in-mms-server) (medium, CVSS 6.5, published 30 Jul 2026) ## Vulnerabilities per week 6 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 6 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other MZ Automation technologies - [MZ Automation Lib60870](https://junglewise.ai/threats/technologies/lib60870): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "MZ Automation Libiec61850 vulnerabilities", https://junglewise.ai/threats/technologies/libiec61850, 9 November 2026.