https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:28:44.562178+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-71254 CVE-2026-71254 — nanoMODBUS Server-Side Out-of-Bounds Write in handle_read_file_record() 2026-10-07T17:28:44.580009+00:00

Affected: debevv nanoMODBUS

nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbus server-side handle_read_file_record function (FC 0x14, Read File Record) in nanomodbus.c. The function validates that the total request size does not exceed 245 bytes and that each sub-request's record_length is at most 124, but it never validates the CUMULATIVE response size across all sub-requests before processing them.