MZ Automation GmbH libiec61850

**Executive Summary:** Multiple out-of-bounds read vulnerabilities (several CVEs) in MZ Automation's libiec61850 (<1.6.2) can be triggered by crafted IEC 61850 GOOSE and MMS messages to cause process crashes and denial-of-service in energy/industrial control system deployments worldwide; CISA recommends minimizing network exposure, isolating control networks, using secure remote access methods, and applying defensive measures. No known public exploitation was reported as of the advisory release (2026-07-30).