Remote Crash Vulnerability in libIEC61850 Open-Source Implementation
CVE-2026-57446

5.3MEDIUM

Key Information:

Vendor

Mz-automation

Status
Libiec61850
Vendor
CVE Published:
16 October 2026

What is CVE-2026-57446?

The libIEC61850 library, an open-source implementation of the IEC 61850 protocols, is susceptible to a vulnerability that allows attackers to crash the server remotely. This issue arises during the MMS ObtainFile operation, which, when failing after a successful request, can lead to improper handling of file resources. Specifically, an existing non-NULL value remains in a task marked as unused, potentially causing the server to terminate unexpectedly. This vulnerability affects versions 1.6.1 and below and is addressed in version 1.6.2.

Affected Version(s)

libiec61850 >= 1.6.1, < 1.6.2

References

https://github.com/mz-automation/libiec61850/security/adv...
x_refsource_CONFIRM
https://github.com/mz-automation/libiec61850/commit/d86b4...
x_refsource_MISC
https://github.com/mz-automation/libiec61850/releases/tag...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.