CVE-2026-66720 – MZ Automation libiec61850 Out-of-bounds Read

CVE ID :CVE-2026-66720

Published : July 30, 2026, 11:16 p.m. | 28 minutes ago

Description :The GOOSE subscriber component improperly validates the UTC timestamp
field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2
multicast messages. A specially crafted GOOSE frame containing an
undersized timestamp field can trigger a heap out-of-bounds read during
message processing, causing the process to crash and resulting in a
denial-of-service condition.

Severity: 7.1 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…