CVE-2026-66720
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Jul 30, 2026
Vendor
unknown
Description
The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing, causing the process to crash and resulting in a denial-of-service condition.