CVE-2026-52134

Received Received - Intake

Authentication Bypass in libiec61850 via GOOSE Frame

Publication date: 2026-07-31

Last updated on: 2026-07-31

Assigner: MITRE

Description

An issue in the parseGoosePayload() function (/goose/goose_receiver.c) of libiec61850 v1.6 allows attackers to bypass authentication via a captured GOOSE frame.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-31

Last Modified

2026-07-31

Generated

2026-08-01

AI Q&A

2026-08-01

EPSS Evaluated

N/A

NVD

CVE-2026-52134

EUVD

EUVD-2026-51654

Affected Vendors & Products

Vendor	Product	Version / Range
libiec61850	libiec61850	1.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the parseGoosePayload() function of libiec61850 v1.6. It allows attackers to bypass authentication by sending a specially crafted GOOSE frame, potentially gaining unauthorized access to the system.

Impact Analysis

If exploited, this vulnerability could allow attackers to bypass authentication and gain unauthorized access to systems using libiec61850 v1.6. This may lead to data breaches, unauthorized control of industrial systems, or other malicious activities depending on the system's use case.

Compliance Impact

This vulnerability allows attackers to bypass authentication via manipulated GOOSE frames, which could lead to unauthorized access to industrial control systems. Such breaches may violate compliance requirements under GDPR (data protection) or HIPAA (healthcare data security) by exposing sensitive operational or personal data.

Mitigation Strategies

Update libiec61850 to the latest version to patch the parseGoosePayload() function vulnerability. Monitor network traffic for suspicious GOOSE frames and restrict access to the affected system.

Hi! I’m here to help you understand CVE-2026-52134. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70