CVE-2026-48503

The libIEC61850 open-source implementation (prior to version 1.6.2 ) contains a remote information disclosure vulnerability in its MMS file service . The root cause is located in src/mms/iso_mms/server/mms_file_service.c, where the fileOpen function accepts an out-of-range initialPosition and sto...

CVE-2026-48503 libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, the MMS file service in src/mms/isomms/server/mmsfileservice.c accepts an out-of-range initialPosition in fileOpen and stores it in the...