CVE-2026-68908

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, ReportingRCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write path. When GI later causes...

CVE-2026-68908 libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, ReportingRCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write path. When GI later causes...

CVE-2026-68908

The libIEC61850 open-source implementation of IEC 61850 protocols (including MMS, GOOSE, Sampled Values, and R-Session) contains a vulnerability in versions prior to 1.6.2 . The Reporting_RCBWriteAccessHandler accepts an RptID exceeding 129 bytes during the report-control-block write path. Subseq...

EUVD-2026-102910

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, ReportingRCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write path. When GI later causes...

CVE-2026-68908 libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, ReportingRCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write path. When GI later causes...

CVE-2026-68908

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, ReportingRCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write path. When GI later causes...

CVE-2026-68908: Free of Memory not on the Heap

libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, ReportingRCBWriteAccessHandler accepts an RptID longer than 129 bytes in the report-control-block write path. When GI later causes...

MZ Automation GmbH libiec61850 Resource Management Error Vulnerability

MZ Automation GmbH’s libiec61850 versions prior to 1.6.2 contain a resource management vulnerability. This vulnerability arises from ReportingRCBWriteAccessHandler accepting an RptID exceeding 129 bytes when writing to the report control block. During report serialization,...

Free of Memory not on the Heap

Overview Affected versions of this package are vulnerable to Free of Memory not on the Heap via the ReportingRCBWriteAccessHandler function. An attacker can cause a denial of service by sending specially crafted requests that trigger the freeing of memory not allocated on the heap. Remediation A...

CVE-2026-18582

A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...

CVE-2026-18582

Summary: CVE-2026-18582 affects mz-automation libiec61850 up to 1.6.1, specifically the Reporting_RCBWriteAccessHandler in src/iec61850/server/mms_mapping/reporting.c of the Report Sending Path Handler. The vulnerability allows freeing memory not on the heap (memory disclosure/ corruption) and is...

CVE-2026-18582

A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function ReportingRCBWriteAccessHandler of the file src/iec61850/server/mmsmapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not ...