A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. It has been classified as critical. Affected is an unknown function of the component GOOSE Subscriber. The manipulation leads to out-of-bounds read.
This vulnerability is uniquely identified as CVE-2026-66720. The attack is possible to be carried out remotely. No exploit exists.
Upgrading the affected component is recommended.