CVE-2026-52134
CRITICAL
CVSS 9.8
N A
Verified Advisory
Authentication bypass in libIEC61850 GOOSE frame parser (CVE-2026-52134)
A flaw in the parseGoosePayload() function in /goose/goose_receiver.c allows an attacker to bypass authentication by replaying or crafting a captured GOOSE frame. Successful exploitation may allow unauthorized control or manipulation of IEC 61850 protocol communications.
Affected versions:
- v1.6
We recommend updating to: 1.6.2.
CVSS 9.8 · our assessment: act_now
Reference: https://github.com/mz-automation/libiec61850
Details: https://vuln.today/cve/CVE-2026-52134
Verified by vuln.today against published advisories.
Affected versions
- – v1.6
Fixed in: 1.6.2