{"metadata": {"vulnerability": "CVE-2026-48741", "count": 11, "kinds": {"milestone": 3, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-05-22T19:10:35.747Z", "date_only": false, "value": "2026-05-22T19:10:35.747Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-48741", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-16T15:45:32.680Z", "date_only": false, "value": "2026-10-16T15:45:32.680Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-48741", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-16T15:45:32.680Z", "date_only": false, "value": "2026-10-16T15:45:32.680Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-48741", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-16T15:52:37.965Z", "date_only": false, "value": "2026-10-16T15:52:37.965615Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117451388171385826", "record": "CVE-2026-48741", "field": "creation_timestamp", "uuid": "d241cf9a-ec16-4e9a-ab71-f6ddb5f70c0c", "content": "CVE-2026-48741 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alternateArrayAccess in src/mms/iso_mms/server/mms_read_service.c does not validate an alternate-access sub-array range when numberOfElements is greater than zero. An out-of-range MmsValue_getElement call returns NULL, and the sub-array branch passes that value to MmsValue_isDeletable, causing a NULL pointer dereference. A remote MMS Read request can therefore crash servers whose data models contain arrays, while the single-element error path handles the same invalid index safely. This issue is fixed in version 1.6.2.\nhttps://www.cve.org/CVERecord?id=CVE-2026-48741https://github.com/mz-automation/libiec61850/security/advisories/GHSA-8mfr-hq64-9w33https://github.com/mz-automation/libiec61850/commit/7c15310405def00cac628ebde4ce1404bfb8a411https://github.com/mz-automation/libiec61850/releases/tag/v1.6.2#mz-automation #libiec61850#CVE_2026_48741#bot", "url": "https://infosec.exchange/users/cve/statuses/117451388171385826"}, {"timestamp": "2026-10-16T16:18:11.943Z", "date_only": false, "value": "2026-10-16T16:18:11.943", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48741", "record": "FKIE_CVE-2026-48741", "field": "published"}, {"timestamp": "2026-10-16T16:19:57.482Z", "date_only": false, "value": "2026-10-16T16:19:57.482696Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxyy6jccpg2y", "record": "CVE-2026-48741", "field": "creation_timestamp", "uuid": "b48ec655-e0a3-406f-8eae-b914b4964a51", "content": "\ud83d\udfe0 CVE-2026-48741 - High (7.5)\n\nlibIEC61850 is an open-source implementation of IEC 61850 client and server protocols including M...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48741/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxyy6jccpg2y"}, {"timestamp": "2026-10-21T02:22:14.586Z", "date_only": false, "value": "2026-10-21T02:22:14.586024Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48741", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-21T02:22:14.586Z", "date_only": false, "value": "2026-10-21T02:22:14.586024Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48741", "record": "FKIE_CVE-2026-48741", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-21T02:22:38.275Z", "date_only": false, "value": "2026-10-21T02:22:38.275Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-48741", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-21T02:22:38.275Z", "date_only": false, "value": "2026-10-21T02:22:38.275Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-48741", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-21T03:17:19.473Z", "date_only": false, "value": "2026-10-21T03:17:19.473", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-48741", "record": "FKIE_CVE-2026-48741", "field": "lastModified"}]}