CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...

CVE-2026-0667

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...

CVE-2026-0667: Improper Check for Unusual or Exceptional Conditions

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol...

Modbus write enabled

Checks whether Modbus TCP writes FC6 are accepted without authentication by writing a test value and verifying the register change. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from lib.protocols.ics.icsscannerclient...

Schneider Quantum 140 PLC control

Uses Modbus/TCP with Schneider Quantum proprietary function 0x5A to start or stop Schneider Quantum 140 series PLCs without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """ Schneider Quantum 140 series PLC start/stop control. Uses Schneider's proprietary Modbus extension function 0x5...

Modbus write register

Writes a single holding register over Modbus TCP via an active Modbus session. Supports dry-run mode to validate connectivity without changing the PLC. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.icssessionmixin import ModbusSessionMixin class...

Modbus TCP Client

Connects to a Modbus TCP server and creates an interactive Modbus shell session !/usr/bin/env python3 -- coding: utf-8 -- """Modbus TCP bind listener — opens a Modbus session for interactive register access.""" from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from...

Modbus session acquire

Opens a Modbus TCP session and registers it in the framework session list for follow-on OT modules and the Modbus shell. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from core.framework.basemodule import ModuleResult from lib.protocols.ics.constants import ICSPROTOCOLPORTS fr...

Modbus TCP identify

Actively probes Modbus TCP port 502 by scanning unit IDs and reading holding registers. Safe read-only reconnaissance for PLC/RTU discovery. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.ics.constants import ICSPROTOCOLPORTS from...

CVE-2026-12818

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...

CVE-2026-12818 DVP-12SE Exposure of Sensitive Information Vulnerability

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...

CVE-2026-12818 DVP-12SE Exposure of Sensitive Information Vulnerability

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...

CVE-2026-12819: Missing Authentication for Critical Function

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions...

CVE-2026-12818: Allocation of Resources Without Limits or Throttling

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...

PT-2026-53818

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions...

PT-2026-53817

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling CWE-770 within their Modbus TCP service...

CVE-2026-54410 nanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field

nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recvmsgheader function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length fiel...

EUVD-2026-36661

nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recvmsgheader function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length fiel...

CVE-2026-54410: Off-by-one Error

nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recvmsgheader function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte receive buffer by sending a crafted MBAP frame whose Length fiel...

PT-2026-49133

Name of the Vulnerable Software and Affected Versions nanoMODBUS versions prior to 1.23.1 Description The Modbus/TCP server contains an off-by-one buffer overflow in the recv msg header function. Remote unauthenticated attackers can exploit this by sending a crafted MBAP frame with the Length fie...