{"vulnerability": "CVE-2026-48741", "sightings": [{"uuid": "d241cf9a-ec16-4e9a-ab71-f6ddb5f70c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48741", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117451388171385826", "content": "CVE-2026-48741 libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. Prior to 1.6.2, alternateArrayAccess in src/mms/iso_mms/server/mms_read_service.c does not validate an alternate-access sub-array range when numberOfElements is greater than zero. An out-of-range MmsValue_getElement call returns NULL, and the sub-array branch passes that value to MmsValue_isDeletable, causing a NULL pointer dereference. A remote MMS Read request can therefore crash servers whose data models contain arrays, while the single-element error path handles the same invalid index safely. This issue is fixed in version 1.6.2.\nhttps://www.cve.org/CVERecord?id=CVE-2026-48741https://github.com/mz-automation/libiec61850/security/advisories/GHSA-8mfr-hq64-9w33https://github.com/mz-automation/libiec61850/commit/7c15310405def00cac628ebde4ce1404bfb8a411https://github.com/mz-automation/libiec61850/releases/tag/v1.6.2#mz-automation #libiec61850#CVE_2026_48741#bot", "creation_timestamp": "2026-10-16T15:52:37.965615Z"}, {"uuid": "b48ec655-e0a3-406f-8eae-b914b4964a51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48741", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxyy6jccpg2y", "content": "\ud83d\udfe0 CVE-2026-48741 - High (7.5)\n\nlibIEC61850 is an open-source implementation of IEC 61850 client and server protocols including M...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48741/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-16T16:19:57.482696Z"}]}