CVE-2026-66720 in libiec61850
الملخص
بحسب MITRE • 31/07/2026
The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing, causing the process to crash and resulting in a denial-of-service condition.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.