CVE-2026-50103

MediumCVSS 6.5

Published: 23/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

18th percentile - higher than 18% of all known CVEs

Summary

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame with a malformed TLV value.

Risk Assessment

A DoS attack could disrupt industrial automation systems relying on the GOOSE protocol, leading to downtime.

Recommendation

Apply the vendor patch. Restrict network access to unauthorized devices.

Other vulnerabilities in GOOSE parser

CVE-2026-66369Medium
The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap out-of-bounds read. This reliably terminates the subscriber process and causes a denial-of-service.

Original NVD description (English source)

A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS