CVE-2026-68906High 8.7libIEC61850: Infinite loop and out-of-bounds read in ACSE parseUserInformation when parsing a malformed AARE PDU0.5%
CVE-2026-68907High 8.2libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments0.4%
CVE-2026-68908Medium 5.3libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path0.5%
CVE-2026-57446Medium 5.3libIEC61850: Server-side double free in MMS ObtainFile task reuse due to stale FILE* handle0.4%
CVE-2026-48741High 7.5libIEC61850: Remote NULL dereference in MMS Read alternate-access sub-array path leads to server-side DoS0.5%
CVE-2026-48503High 7.5libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead0.5%