PT-2026-68678

CVE-2026-19108

Published

2026-08-06

Updated

2026-08-08

Description by

CVSS 3.1

5.3

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions libiec61850 versions prior to 1.6.2

Description A use after free issue exists in the URCB Revalidation component within the deleteDataSetValuesShadowBuffer() function located in the src/iec61850/server/mms mapping/reporting.c file. This flaw allows for local manipulation of the system.

Recommendations Update to version 1.6.2.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers