https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:05:21.454100+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349650 EUVD-2026-349650 2026-10-06T15:05:21.492720+00:00 EUVD-2026-349650 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71255 fkie_cve-2026-71255 2026-10-06T15:05:21.492761+00:00

nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res function (FC 0x2B/MEI 0x0E, Read Device Identification) in nanomodbus.c. The server-supplied object_length field (0-246) is validated only against the remaining PDU size (res_size_left) and is never validated against the caller-supplied buffers_length parameter.

 https://cve.radiocsirt.org/vuln/ghsa-9rfp-q4v5-653h GHSA-9rfp-q4v5-653h 2026-10-06T15:05:21.492796+00:00

nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus client-side recv_read_device_identification_res() function (FC 0x2B/MEI 0x0E, Read Device Identification) in nanomodbus.c. The server-supplied object_length field (0-246) is validated only against the remaining PDU size (res_size_left) and is never validated against the caller-supplied buffers_length parameter. After copying data with strncpy(buffers_out[buf_index], str, buffers_length), the code unconditionally writes a NUL terminator at buffers_out[buf_index][object_length]. When a malicious or compromised Modbus server sends a response with object_length greater than or equal to the client's buffers_length, this NUL write lands past the end of the caller-provided buffer, corrupting adjacent stack or heap memory on the client.