CVE-2026-66364

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description A boundary handling flaw exists in the GOOSE payload parser. An unauthenticated attacker can trigger this issue by sending a single Layer 2 multicast frame on the process bus. The flaw occurs when an attacker-controlled inner element length exceeds its enclosing length during the processing of specific payload fields, leading the parser to perform an out-of-bounds read of one byte. This action reliably terminates the subscriber process, resulting in a denial-of-service condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.