CVE-2026-15105

CVE-2026-15105 affects davenardella snap7 up to 1.4.3. The flaw resides in TS7Worker::PerformFunctionRead (src/core/s7_server.cpp) within the ReadVar Request Handler, causing deserialization. Exploitation requires local-network access and a public exploit has been published. The project was infor...

CVE-2026-51218

The software snap7 version 1.4.3 is vulnerable to a heap buffer overflow in the TS7Worker::PerformFunctionWrite() function located in /core/s7_server.cpp. An attacker can exploit this by sending a crafted packet to trigger a Denial of Service (DoS) . The vulnerability occurs when the program writ...

CVE-2026-51218: Heap-based Buffer Overflow

A heap buffer overflow in the TS7Worker::PerformFunctionWrite function /core/s7server.cpp of snap7 v1.4.3 allows attackers to cause a Denial of Service DoS via a crafted packet...