CVE-2026-19108

MEDIUM

MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free

Title source: cna
STIX 2.1

Description

A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The affected element is the function deleteDataSetValuesShadowBuffer of the file src/iec61850/server/mms_mapping/reporting.c of the component URCB Revalidation. The manipulation results in use after free. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 1.6.2 is sufficient to fix this issue. The patch is identified as 486fd57f3aed65bb9d636ff00f9ddce2e450b168. Upgrading the affected component is advised.

References (8)

Core 8
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-386569 | MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free
https://vuldb.com/vuln/386569
Signature, Permissions Required signature permissions-required
VDB-386569 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/386569/cti
Third Party Advisory third-party-advisory
CVE-2026-19108 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-19108
Third Party Advisory third-party-advisory
Submit #864520 | MZ Automation libiec61850 1.6.1 Memory Corruption(heap-use-after-free)
https://vuldb.com/submit/864520

Scores

CVSS v3 5.3
EPSS 0.0012
EPSS Percentile 2.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-119 CWE-416
Status published
Products (3)
MZ Automation/libiec61850 1.6.0
MZ Automation/libiec61850 1.6.1
MZ Automation/libiec61850 1.6.2
Published Aug 06, 2026
Tracked Since Aug 07, 2026