{"id":"CVE-2026-66364","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-66364","generatedAt":"2026-10-28T08:27:51.947Z","title":"When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over read by one byte.","description":"The GOOSE payload parser contains a boundary handling flaw that can be \ntriggered by a single unauthenticated Layer 2 multicast frame on the \nprocess bus. When processing specific payload fields, an attacker \ncontrolled inner element length may exceed its enclosing length, causing\n the parser to over read by one byte. This out-of-bounds read reliably \nterminates the subscriber process, resulting in a denial-of-service \ncondition.","published":"2026-07-30T23:16:53.000Z","lastModified":"2026-09-03T17:58:19.000Z","status":"Deferred","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"4.0","score":7.1,"severity":"HIGH","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-125"],"affected":[],"epss":{"score":0.00285,"percentile":0.20874,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.29%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-10.json","source":"ics-cert@hq.dhs.gov"},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","source":"ics-cert@hq.dhs.gov"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-66364","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}