Skip to content
OpenAdvisories

Vendor

debevv

4 known vulnerabilities.

Products

nanoMODBUS 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-71255

    nanoMODBUS Client-Side Out-of-Bounds Write via object_length in recv_read_device_identification_res()

    nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res function (FC 0x2B/MEI 0x0E, Read Device Identification) in nanomodbus.c. The server-supplied object_length field (0-246) is validated only…

    debevv nanoMODBUS
  • High 8.6
    CVE-2026-54410

    nanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field

    nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sendin…

    debevv nanoMODBUS