CVE-2026-52134 PUBLISHED

Assigner: mitre
Reserved: 08.06.2026 Published: 31.07.2026 Updated: 31.07.2026

An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows attackers to bypass authentication via a captured GOOSE frame.

Product Status

Vendor	n/a
Product	n/a
Versions	Version n/a is affected

References

https://github.com/mz-automation/libiec61850
https://github.com/mz-automation/libiec61850/tree/v1.6/src/goose/goose_receiver.c
https://github.com/if-forget/CVE-2026-52134-libiec61850

Problem Types

n/a text