# MZ Automation vulnerabilities Source: https://junglewise.ai/threats/vendors/mz-automation Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/mz-automation.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 17 vulnerabilities in MZ Automation: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-68908, was published on 16 October 2026. 6 vulnerabilities in the last four weeks, up from none in the four before. 2 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 6 - Last 90 days: 6 - All time: 17 (0 critical, 0 exploited in the wild) ## About MZ Automation A provider of communication protocols and software solutions for power systems and industrial automation. ## Latest MZ Automation vulnerabilities - [CVE-2026-68908: libIEC61850 invalid free in MMS report serialization](https://junglewise.ai/threats/cve-2026-68908-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (medium, CVSS 5.3, published 16 Oct 2026) - [CVE-2026-68907: libIEC61850 buffer over-read in dataset access handler](https://junglewise.ai/threats/cve-2026-68907-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (info, published 16 Oct 2026) - [CVE-2026-68906: libIEC61850 infinite loop in ACSE parseUserInformation](https://junglewise.ai/threats/cve-2026-68906-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (info, published 16 Oct 2026) - [CVE-2026-57446: libIEC61850 MMS ObtainFile double-free denial of service](https://junglewise.ai/threats/cve-2026-57446-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (medium, CVSS 5.3, published 16 Oct 2026) - [CVE-2026-48741: libIEC61850 NULL pointer dereference in MMS read service](https://junglewise.ai/threats/cve-2026-48741-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (high, CVSS 7.5, published 16 Oct 2026) - [CVE-2026-48503: libIEC61850 MMS file service information disclosure](https://junglewise.ai/threats/cve-2026-48503-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (high, CVSS 7.5, published 16 Oct 2026) - [CVE-2026-19259: MZ Automation libiec61850 heap buffer overflow in MmsMapping](https://junglewise.ai/threats/cve-2026-19259-mz-automation-libiec61850-heap-buffer-overflow-in-mmsmapping) (medium, CVSS 5.3, published 8 Aug 2026) - [CVE-2026-18582: mz-automation libiec61850 invalid free in report handling](https://junglewise.ai/threats/cve-2026-18582-mz-automation-libiec61850-invalid-free-in-report-handling) (medium, CVSS 5.3, published 3 Aug 2026) - [CVE-2026-52134: MZ Automation libiec61850 authentication bypass in parseGoosePayload](https://junglewise.ai/threats/cve-2026-52134-mz-automation-libiec61850-authentication-bypass-in) (info, CVSS 0, published 31 Jul 2026) - [CVE-2026-63033: MZ Automation lib60870 out-of-bounds read in InformationObject_ParseObjectAddress](https://junglewise.ai/threats/cve-2026-63033-mz-automation-lib60870-out-of-bounds-read-in-informationobject) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-61893: MZ Automation lib60870 out-of-bounds read in TestCommand_getFromBuffer](https://junglewise.ai/threats/cve-2026-61893-mz-automation-lib60870-out-of-bounds-read-in-testcommand) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-50103: MZ Automation libIEC61850 NULL pointer dereference in GOOSE parser](https://junglewise.ai/threats/cve-2026-50103-mz-automation-libiec61850-null-pointer-dereference-in-goose) (medium, CVSS 6.5, published 23 Jul 2026) - [CVE-2026-50039: MZ Automation libIEC61850 stack-based buffer overflow via Read Request](https://junglewise.ai/threats/cve-2026-50039-mz-automation-libiec61850-stack-based-buffer-overflow-via-read) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-50032: MZ Automation libIEC61850 NULL pointer dereference in MMS handler](https://junglewise.ai/threats/cve-2026-50032-mz-automation-libiec61850-null-pointer-dereference-in-mms-handler) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-49035: MZ Automation libIEC61850 heap overflow in MMS Initiate request](https://junglewise.ai/threats/cve-2026-49035-mz-automation-libiec61850-heap-overflow-in-mms-initiate-request) (high, CVSS 8.1, published 23 Jul 2026) - [CVE-2026-16002: MZ Automation lib60870 out-of-bounds read in parsing process](https://junglewise.ai/threats/cve-2026-16002-mz-automation-lib60870-out-of-bounds-read-in-parsing-process) (high, CVSS 8.2, published 23 Jul 2026) - [CVE-2026-51219: MZ Automation lib60870 heap buffer overflow in CS104 server](https://junglewise.ai/threats/cve-2026-51219-mz-automation-lib60870-heap-buffer-overflow-in-cs104-server) (info, CVSS 7.5, published 29 Jun 2026) ## Most severe MZ Automation vulnerabilities - [CVE-2026-16002: MZ Automation lib60870 out-of-bounds read in parsing process](https://junglewise.ai/threats/cve-2026-16002-mz-automation-lib60870-out-of-bounds-read-in-parsing-process) (high, CVSS 8.2, published 23 Jul 2026) - [CVE-2026-49035: MZ Automation libIEC61850 heap overflow in MMS Initiate request](https://junglewise.ai/threats/cve-2026-49035-mz-automation-libiec61850-heap-overflow-in-mms-initiate-request) (high, CVSS 8.1, published 23 Jul 2026) - [CVE-2026-48741: libIEC61850 NULL pointer dereference in MMS read service](https://junglewise.ai/threats/cve-2026-48741-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (high, CVSS 7.5, published 16 Oct 2026) - [CVE-2026-48503: libIEC61850 MMS file service information disclosure](https://junglewise.ai/threats/cve-2026-48503-libiec61850-is-an-open-source-implementation-of-iec-61850-client) (high, CVSS 7.5, published 16 Oct 2026) - [CVE-2026-50039: MZ Automation libIEC61850 stack-based buffer overflow via Read Request](https://junglewise.ai/threats/cve-2026-50039-mz-automation-libiec61850-stack-based-buffer-overflow-via-read) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-50032: MZ Automation libIEC61850 NULL pointer dereference in MMS handler](https://junglewise.ai/threats/cve-2026-50032-mz-automation-libiec61850-null-pointer-dereference-in-mms-handler) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-63033: MZ Automation lib60870 out-of-bounds read in InformationObject_ParseObjectAddress](https://junglewise.ai/threats/cve-2026-63033-mz-automation-lib60870-out-of-bounds-read-in-informationobject) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-61893: MZ Automation lib60870 out-of-bounds read in TestCommand_getFromBuffer](https://junglewise.ai/threats/cve-2026-61893-mz-automation-lib60870-out-of-bounds-read-in-testcommand) (medium, CVSS 6.5, published 30 Jul 2026) - [CVE-2026-50103: MZ Automation libIEC61850 NULL pointer dereference in GOOSE parser](https://junglewise.ai/threats/cve-2026-50103-mz-automation-libiec61850-null-pointer-dereference-in-goose) (medium, CVSS 6.5, published 23 Jul 2026) - [CVE-2026-18582: mz-automation libiec61850 invalid free in report handling](https://junglewise.ai/threats/cve-2026-18582-mz-automation-libiec61850-invalid-free-in-report-handling) (medium, CVSS 5.3, published 3 Aug 2026) ## Vulnerabilities per week 6 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 6 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## MZ Automation technologies - [MZ Automation Libiec61850](https://junglewise.ai/threats/technologies/libiec61850): 21 vulnerabilities - [MZ Automation Lib60870](https://junglewise.ai/threats/technologies/lib60870): 4 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "MZ Automation vulnerabilities", https://junglewise.ai/threats/vendors/mz-automation, 9 November 2026.