CVE-2026-18583Proof of concept (PoC) published · CISASuited to automated attack · CISA
mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds
CVSS score
6.9
EPSS probability
%0.9
Risk score
0.1
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
6.9
CVE-2026-18582
mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
M
Patch verifiedEPSS %1
7.4
CVE-2024-36702
Out-of-bounds write in Mz Automation Libiec61850
M
Patch status unknown Public Exploits:1EPSS %0
4.8
CVE-2026-19259
MZ Automation libiec61850 MMS Protocol Workflow iec61850_common.c MmsMapping_varAccessSpecToObjectReference heap-based overflow
M
Patch status unknownEPSS %0
4.8
CVE-2026-19206
MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadless heap-based overflow
M
Patch verifiedEPSS %0
4.8
CVE-2026-19108
MZ Automation libiec61850 URCB Revalidation reporting.c deleteDataSetValuesShadowBuffer use after free
M
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-18583"