CVE-2026-0667
This vulnerability allows attackers to exploit a flaw in the Modbus TCP protocol, potentially leading to arbitrary code execution, denial of service, and loss of confidentiality and integrity. It is rated critical due to its high impact and lack of mitigations.
No official fix yet. If none appears within 45 days of first tracking, this entry is removed automatically.
Who is affected
Devices and systems that use the Modbus TCP protocol without proper input validation, such as industrial control systems, are potentially affected. No specific product versions are listed.
Real-world impact
An attacker who can send crafted Modbus TCP messages could run arbitrary code on the target device, crash the service, or steal sensitive data.
Why this severity
The CVSS score of 9.3 reflects the vulnerability’s high confidentiality, integrity, and availability impact, combined with no authentication or user interaction required. The lack of mitigations and the ability to exploit remotely make it a critical risk.
What to do about it
No official fix or mitigation is documented in the sources yet. Monitor the vendor advisory and apply the patch as soon as it is released.
No fix documented in sources