Live › vulnerability › CVE-2026-57446
Go to dashboardlibIEC61850 versions 1.6.1 through 1.6.2 close a file handle twice after a crafted sequence of MMS ObtainFile requests. A remote client can crash a server that has the MMS file service and ObtainFile enabled.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that embed libIEC61850 as an IEC 61850 server with the MMS file service and ObtainFile enabled are exposed to remote crashes. Clients only, or servers without the MMS file service, are not affected by this flaw as described.
No product ranges from the sources yet.
1.6.2.1.6.2 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled Values, and R-Session. From 1.6.1 until 1.6.2, a successful MMS ObtainFile operation closes MmsObtainFileTask::fileHandle but leaves the stale non-NULL value in a task marked MMS_FILE_UPLOAD_STATE_NOT_USED. If a later ObtainFile request reuses that task and destination creation fails, MMS_FILE_UPLOAD_STATE_SEND_OBTAIN_FILE_ERROR_DESTINATION cleanup closes the stale FILE object again. Servers with the MMS file service and ObtainFile enabled can therefore be crashed remotely by the success-then-failure request sequence. This issue is fixed in version 1.6.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-57446")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.