CVE-2026-52134 is a critical vulnerability in libiec61850 v1.6 affecting the parseGoosePayload() function in goose_receiver.c. The flaw allows an attacker to bypass authentication mechanisms by replaying or using a captured GOOSE frame, which is part of the IEC 61850 protocol used in electrical substation automation. The vulnerability has a CVSS 3.1 base score of 9.8, indicating network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability. No patch or official remediation level has been disclosed as of the publication date.

Successful exploitation allows an unauthenticated attacker to bypass authentication controls, potentially leading to unauthorized control or manipulation of the system using the IEC 61850 protocol. This can compromise system confidentiality, integrity, and availability, posing a critical risk to affected environments.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, organizations should consider implementing network-level protections such as isolating affected devices and monitoring for suspicious GOOSE frame activity, but no specific vendor mitigation is provided.