CVE-2026-54410: high-severity vulnerability in debevv nanoMODBUS
nanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.5%
nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length field is set to 255.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:P/AU:Y
Affected products
debevv · nanoMODBUSRelated CVEs — debevv nanoMODBUS
In the same product, most dangerous first.
CVE-2026-71256CRITICALnanoMODBUS Client-Side Out-of-Bounds Read Leading to Wild-Pointer Write via object_idEPSS 0.6%CVE-2026-71254CRITICALnanoMODBUS Server-Side Out-of-Bounds Write in handle_read_file_record()EPSS 0.6%CVE-2026-71255HIGHnanoMODBUS Client-Side Out-of-Bounds Write via object_length in recv_read_device_identification_res()EPSS 0.4%