CVE-2026-18582

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18582", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-08-02T19:14:04.727Z", "datePublished": "2026-08-03T01:15:12.285Z", "dateUpdated": "2026-08-03T15:39:59.086Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-03T06:08:27.056Z"}, "title": "mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-590", "lang": "en", "description": "Free of Memory not on the Heap"}]}], "affected": [{"vendor": "mz-automation", "product": "libiec61850", "versions": [{"version": "1.6.0", "status": "affected"}, {"version": "1.6.1", "status": "affected"}, {"version": "1.6.2", "status": "unaffected"}], "cpes": ["cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*"], "modules": ["Report Sending Path Handler"]}], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler of the file src/iec61850/server/mms_mapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not on the heap. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.2 is able to resolve this issue. The patch is identified as 5b2a69f44256b8548927d8afdd7ac5f5381abe1e. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "timeline": [{"time": "2026-08-02T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-08-02T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-08-03T08:10:21.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Chuan Wei", "type": "finder"}, {"lang": "en", "value": "Carnegie (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "Carnegie (VulDB User)", "type": "analyst"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/385411", "name": "VDB-385411 | mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/385411/cti", "name": "VDB-385411 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-18582", "name": "CVE-2026-18582 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/844920", "name": "Submit #844920 | MZ Automation GmbH libiec61850 1.6.1 Memory Corruption", "tags": ["third-party-advisory"]}, {"url": "https://github.com/mz-automation/libiec61850/security/advisories/GHSA-7qg8-hm25-rv5v", "tags": ["related"]}, {"url": "https://github.com/gff-cw/information/issues/2", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/mz-automation/libiec61850/commit/5b2a69f44256b8548927d8afdd7ac5f5381abe1e", "tags": ["patch"]}, {"url": "https://github.com/mz-automation/libiec61850/releases/tag/v1.6.2", "tags": ["patch"]}, {"url": "https://github.com/mz-automation/libiec61850/", "tags": ["product"]}], "tags": ["x_open-source"], "x_generator": ["VulDB PVTS v202608"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-03T15:39:35.410262Z", "id": "CVE-2026-18582", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-03T15:39:59.086Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-18582", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-03T15:39:35.410262Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-03T15:39:49.753Z"}}], "cna": {"tags": ["x_open-source"], "title": "mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap", "credits": [{"lang": "en", "type": "finder", "value": "Chuan Wei"}, {"lang": "en", "type": "reporter", "value": "Carnegie (VulDB User)"}, {"lang": "en", "type": "analyst", "value": "Carnegie (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:OF/RC:C"}}], "affected": [{"cpes": ["cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*"], "vendor": "mz-automation", "modules": ["Report Sending Path Handler"], "product": "libiec61850", "versions": [{"status": "affected", "version": "1.6.0"}, {"status": "affected", "version": "1.6.1"}, {"status": "unaffected", "version": "1.6.2"}]}], "timeline": [{"lang": "en", "time": "2026-08-02T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-08-02T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-08-03T08:10:21.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/385411", "name": "VDB-385411 | mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/385411/cti", "name": "VDB-385411 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-18582", "name": "CVE-2026-18582 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/844920", "name": "Submit #844920 | MZ Automation GmbH libiec61850 1.6.1 Memory Corruption", "tags": ["third-party-advisory"]}, {"url": "https://github.com/mz-automation/libiec61850/security/advisories/GHSA-7qg8-hm25-rv5v", "tags": ["related"]}, {"url": "https://github.com/gff-cw/information/issues/2", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/mz-automation/libiec61850/commit/5b2a69f44256b8548927d8afdd7ac5f5381abe1e", "tags": ["patch"]}, {"url": "https://github.com/mz-automation/libiec61850/releases/tag/v1.6.2", "tags": ["patch"]}, {"url": "https://github.com/mz-automation/libiec61850/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202608"], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler of the file src/iec61850/server/mms_mapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not on the heap. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.2 is able to resolve this issue. The patch is identified as 5b2a69f44256b8548927d8afdd7ac5f5381abe1e. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-590", "description": "Free of Memory not on the Heap"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-08-03T06:08:27.056Z"}}}, "cveMetadata": {"cveId": "CVE-2026-18582", "state": "PUBLISHED", "dateUpdated": "2026-08-03T15:39:59.086Z", "dateReserved": "2026-08-02T19:14:04.727Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-08-03T01:15:12.285Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:mz-automation:libiec61850:*:*:*:*:*:*:*:*"], "modules": ["Report Sending Path Handler"], "product": "libiec61850", "vendor": "mz-automation", "versions": [{"status": "affected", "version": "1.6.0"}, {"status": "affected", "version": "1.6.1"}, {"status": "unaffected", "version": "1.6.2"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler of the file src/iec61850/server/mms_mapping/reporting.c of the component Report Sending Path Handler. The manipulation results in free of memory not on the heap. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 1.6.2 is able to resolve this issue. The patch is identified as 5b2a69f44256b8548927d8afdd7ac5f5381abe1e. It is suggested to upgrade the affected component. The vendor was contacted early about this disclosure."}, {"lang": "es", "value": "Se ha descubierto una falla de seguridad en mz-automation libiec61850 hasta la versi\u00f3n 1.6.1. Esta vulnerabilidad afecta la funci\u00f3n Reporting_RCBWriteAccessHandler del archivo src/iec61850/server/mms_mapping/reporting.c del componente Gestor de Ruta de Env\u00edo de Informes. La manipulaci\u00f3n resulta en una liberaci\u00f3n de memoria que no est\u00e1 en el heap. Es posible lanzar el ataque remotamente. El exploit ha sido publicado al p\u00fablico y puede ser usado para ataques. Actualizar a la versi\u00f3n 1.6.2 puede resolver este problema. El parche se identifica como 5b2a69f44256b8548927d8afdd7ac5f5381abe1e. Se sugiere actualizar el componente afectado. El proveedor fue contactado con antelaci\u00f3n sobre esta divulgaci\u00f3n."}], "id": "CVE-2026-18582", "lastModified": "2026-10-23T22:10:00.160", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-18582", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-03T15:39:35.410262Z", "version": "2.0.3"}}]}, "published": "2026-08-03T02:16:29.163", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/gff-cw/information/issues/2"}, {"source": "cna@vuldb.com", "url": "https://github.com/mz-automation/libiec61850/"}, {"source": "cna@vuldb.com", "url": "https://github.com/mz-automation/libiec61850/commit/5b2a69f44256b8548927d8afdd7ac5f5381abe1e"}, {"source": "cna@vuldb.com", "url": "https://github.com/mz-automation/libiec61850/releases/tag/v1.6.2"}, {"source": "cna@vuldb.com", "url": "https://github.com/mz-automation/libiec61850/security/advisories/GHSA-7qg8-hm25-rv5v"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-18582"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/844920"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/385411"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/385411/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-590"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.6.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "1.6.1"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "1.6.2"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "libiec61850", "source": "cna", "vendor": "mz-automation"}, "product": "libiec61850", "vendor": "mz-automation"}], "created": "2026-08-03T03:30:12.914162+00:00", "title": "Memory Corruption in mz-automation libiec61850 Report Sending Path Handler", "updated": "2026-08-04T11:00:07.586797+00:00", "vendors": ["mz-automation", "mz-automation$PRODUCT$libiec61850"]}