CVE-2026-61893

MEDIUM 6.5

MZ Automation lib60870 Out-of-bounds Read

CVSS Score

6.5

EPSS Score

0.0%

EPSS Percentile

0th

A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.

CWE	CWE-125
Vendor	mz automation
Product	lib60870
Published	Jul 30, 2026

Stay Ahead of the Next One

Get instant alerts for mz automation lib60870

Be the first to know when new medium vulnerabilities affecting mz automation lib60870 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

Low

Affected Versions

MZ Automation / lib60870

2.4.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/mz-automation/lib60870/security/advisories/GHSA-g3w7-x5rx-83xm cisa.gov: https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11 github.com: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-11.json

Credits

arun babu puthuparambil of Central Power Research Institute, Bengaluru, India reported this vulnerability to CISA.