CVE-2026-18583: Out-of-Bounds Read in mz-automation libiec61850
CVE-2026-18583 is a medium severity vulnerability in mz-automation libiec61850 versions 1.6.0 and 1.6.1. It involves an out-of-bounds read in the checkDataSetAccess function of the MMS Request Handler component. The vulnerability can be triggered remotely without authentication. A public exploit is available. Upgrading to version 1.6.2 addresses the issue.
AI Analysis
Technical Summary
An out-of-bounds read vulnerability exists in the checkDataSetAccess function within the MMS Request Handler component of mz-automation libiec61850 up to version 1.6.1. This flaw allows remote attackers to cause an out-of-bounds read, potentially leading to information disclosure or application instability. The vulnerability is fixed in version 1.6.2. The exploit code has been publicly released, increasing the risk of exploitation.
Potential Impact
The vulnerability allows remote attackers to perform an out-of-bounds read, which may lead to information disclosure or application crashes. The CVSS 4.0 base score is 6.9 (medium severity), indicating a significant but not critical impact. No privilege, user interaction, or scope changes are required for exploitation.
Mitigation Recommendations
Upgrading to mz-automation libiec61850 version 1.6.2 is recommended to remediate this vulnerability. The vendor has provided a patch identified by commit 062062daf4cb50c7aa76e01d6fb4d58fc9278a7d. No other mitigation or temporary fixes are indicated.
CVE-2026-18583: Out-of-Bounds Read in mz-automation libiec61850
Description
CVE-2026-18583 is a medium severity vulnerability in mz-automation libiec61850 versions 1.6.0 and 1.6.1. It involves an out-of-bounds read in the checkDataSetAccess function of the MMS Request Handler component. The vulnerability can be triggered remotely without authentication. A public exploit is available. Upgrading to version 1.6.2 addresses the issue.
CVSS v4.0
Score 6.9medium
Affected software
mz-automation
libiec61850
pkg:github/mz-automation/libiec61850cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
An out-of-bounds read vulnerability exists in the checkDataSetAccess function within the MMS Request Handler component of mz-automation libiec61850 up to version 1.6.1. This flaw allows remote attackers to cause an out-of-bounds read, potentially leading to information disclosure or application instability. The vulnerability is fixed in version 1.6.2. The exploit code has been publicly released, increasing the risk of exploitation.
Potential Impact
The vulnerability allows remote attackers to perform an out-of-bounds read, which may lead to information disclosure or application crashes. The CVSS 4.0 base score is 6.9 (medium severity), indicating a significant but not critical impact. No privilege, user interaction, or scope changes are required for exploitation.
Mitigation Recommendations
Upgrading to mz-automation libiec61850 version 1.6.2 is recommended to remediate this vulnerability. The vendor has provided a patch identified by commit 062062daf4cb50c7aa76e01d6fb4d58fc9278a7d. No other mitigation or temporary fixes are indicated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-08-02T19:14:08.926Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a70282abf32cb7a3405a156
Added to database: 08/03/2026, 05:33:30 UTC
Last enriched: 08/10/2026, 14:56:29 UTC
Last updated: 09/16/2026, 22:01:33 UTC
Views: 63
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.