Medium severity6.5NVD Advisory· Published Jul 30, 2026· Updated Sep 8, 2026
CVE-2026-61893
CVE-2026-61893
Description
A crafted IEC 60870-5-104 I-frame with TypeID 104 (C_TS_NA_1) and an inflated object count causes TestCommand_getFromBuffer to read one byte past the end of the heap-allocated message buffer.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
3News mentions
1- MZ Automation lib60870CISA ICS Advisories