PatchSiren cyber security CVE debrief

CVE-2026-50032 MZ Automation CVE debrief

A NULL pointer dereference vulnerability in MZ Automation libIEC61850, specifically in the MMS Write Named Variable List handler, may allow a network-adjacent attacker to crash the server by sending a WriteRequest with an empty listOfData field. This issue affects industrial control systems using MZ Automation libIEC61850 versions from 1.0.0 to 1.6.1. The vulnerability has a CVSS score of 7.5 and is considered HIGH severity. Limited information is available on potential exploits or attacks. Defenders should review official advisories and monitor server logs for WriteRequest anomalies. The CVE record was published on 2026-07-23T06:00:00.000Z and has not been modified since then. Affected product deployments should be identified and verified for exposure. Security teams and vulnerability management teams should review the official advisory and monitor for potential exploits. Industrial control system operators using MZ Automation libIEC61850 versions from 1.0.0 to 1.6.1 should update to the latest build to mitigate this vulnerability.

Vendor: MZ Automation
Product: libIEC61850
CVSS: HIGH 7.5
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-07-23
Original CVE updated: 2026-07-23
Advisory published: 2026-07-23
Advisory updated: 2026-07-23

Who should care

Industrial control system operators using MZ Automation libIEC61850 versions from 1.0.0 to 1.6.1 should update to the latest build to mitigate this vulnerability. Security teams and vulnerability management teams should review the official advisory and monitor for potential exploits.

Technical summary

A NULL pointer dereference in the MMS Write Named Variable List handler of MZ Automation libIEC61850 may allow a network-adjacent attacker to crash the server by sending a WriteRequest with an empty listOfData field. This vulnerability affects industrial control systems using MZ Automation libIEC61850 versions from 1.0.0 to 1.6.1. The CVE record and CISA CSAF source item indicate a NULL pointer dereference vulnerability in MZ Automation libIEC61850. Limited information is available on potential exploits or attacks. Defenders should review official advisories and monitor server logs for WriteRequest anomalies. The vulnerability has a CVSS score of 7.5 and is considered HIGH severity.

Defensive priority

Network adjacent attackers may exploit a NULL pointer dereference in the MMS Write Named Variable List handler to crash the server. Update to the latest build of libIEC61850.

Recommended defensive actions

Update to the latest build of libIEC61850
Implement network segmentation to limit adjacent attacker access
Monitor server logs for WriteRequest anomalies
Review compensating controls for exposed systems while remediation is scheduled and verified
Check relevant monitoring, detection, and logs for exposed assets that need extra review
Track exceptions, retest remediated assets, and close the item only after evidence is documented
Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and CISA CSAF source item indicate a NULL pointer dereference vulnerability in MZ Automation libIEC61850. Limited information is available on potential exploits or attacks. Affected product deployments should be identified and verified for exposure. Defenders should review official advisories and monitor server logs for WriteRequest anomalies.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-23T06:00:00.000Z and has not been modified since then.