CVE-2026-52134

CriticalCVSS 9.8

Published: 31/07/2026(UTC)Updated: 03/08/2026(UTC)Translated: 01/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

libiec61850 version 1.6 contains a vulnerability in the parseGoosePayload() function in /goose/goose_receiver.c, allowing attackers to bypass authentication via a captured GOOSE frame.

Risk Assessment

An attacker can send forged GOOSE frames, potentially leading to unauthorized actions in power automation systems.

Recommendation

Update libiec61850 to the latest version containing the fix.

Original NVD description (English source)

An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows attackers to bypass authentication via a captured GOOSE frame.