CVE-2026-49035 — Stack-based Buffer Overflow in MZ Automation libIEC61850

CVE-2026-49035

Stack-based Buffer Overflow in MZ Automation libIEC61850 PUBLISHED

Description (CNA)

The affected product is vulnerable to a heap-based buffer overflow via a crafted MMS Initiate request. Remote code execution (RCE) has been demonstrated when ASLR is disabled; memory corruption or denial of service may occur in configurations where ASLR is enabled.

Affected (CNA)

Vendor / product	Versions
MZ Automation / libIEC61850	affected 1.0.0 through 1.6.1

CWE

CWE-122

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-06

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.