Skip to main content
CVE-2026-52134 CRITICAL CVSS 9.8 N A Verified Advisory

Authentication bypass in libIEC61850 GOOSE frame parser (CVE-2026-52134)

A flaw in the parseGoosePayload() function in /goose/goose_receiver.c allows an attacker to bypass authentication by replaying or crafting a captured GOOSE frame. Successful exploitation may allow unauthorized control or manipulation of IEC 61850 protocol communications. Affected versions: - v1.6 We recommend updating to: 1.6.2. CVSS 9.8 · our assessment: act_now Reference: https://github.com/mz-automation/libiec61850 Details: https://vuln.today/cve/CVE-2026-52134

Verified by vuln.today against published advisories.

Affected versions

  • – v1.6

Fixed in: 1.6.2

Full CVE analysis Reference Published Aug 03, 2026

← All verified advisories

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy