Known Vulnerabilities for Modbus by Schneider-electric
Listed below are 2 of the newest known vulnerabilities associated with "Modbus" by "Schneider-electric".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-71263 json | The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool() (demo/LINUXTCP/port/porttcp.c). The c... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71256 json | nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-pointer write in nmbs_read_device_identific... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71255 json | nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res() fu... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-71254 json | nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record() function (FC 0... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-54410 json | nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header() function of the Modbus/TCP server ... | Not Provided | 2026-06-14 | 2026-06-15 |
| CVE-2026-44107 json | A reboot of the charging controller can be triggered via Modbus TCP without authentication. Therefore, when the Modbus functi... | Not Provided | 2026-07-30 | 2026-07-30 |
| CVE-2026-35227 json | An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race... | Not Provided | 2026-05-12 | 2026-05-12 |
| CVE-2026-13590 json | A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in t... | Not Provided | 2026-06-29 | 2026-06-30 |
| CVE-2026-12819 json | Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, pe... | Not Provided | 2026-06-30 | 2026-06-30 |
| CVE-2026-12818 json | Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) ... | Not Provided | 2026-06-30 | 2026-06-30 |