CVE-2026-50103
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Jul 23, 2026
CISA due date
—
The record
A NULL pointer dereference in the L2 GOOSE and R-GOOSE shared parser, which may allow a network-adjacent attacker to crash a subscribing application by sending a crafted GOOSE frame containing a malformed TLV value.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-87986 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CWE-228
- CVE-2025-59174 Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a vulnerability… CWE-228
- CVE-2026-25657 Ericsson Packet Core Gateway (PCG) versions prior to 1.30 contain an Improper Handling of… CWE-228
- CVE-2026-42100 Improper Handling of Syntactically Invalid Structure in Sparx Pro Cloud Server allows… CWE-228
- CVE-2026-34232 Firebird is an open-source relational database management system. CWE-228
- CVE-2026-20125 A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE… CWE-228