CVE-2026-71263 FreeModbus LINUXTCP Port Off-by-One Global Buffer Overflow in xMBPortTCPPool()

The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool demo/LINUXTCP/port/porttcp.c. The check uses a strict greater-than comparison instead of greater-than-or-equal against the 263-byte MBTCPBUFSIZE limit...

Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP 访问控制错误漏洞

The Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP is an industrial grade DC uninterruptible power supply module from Phoenix Contact, Germany. An access control error vulnerability exists in the Phoenix Contact QUINT4-UPS/24DC/24DC/10/EIP, which originates from an unauthenticated attacker being abl...

Schneider Electric Modicon Controllers 输入验证错误漏洞

Schneider Electric Modicon Controllers is a Modicon family of programmable logic controllers from Schneider Electric France. An input validation error vulnerability exists in Schneider Electric Modicon Controllers that stems from incorrect input validation. When unauthenticated specially crafted...

SolaX Pocket WiFi Security Vulnerability

SolaX Power SolaX Pocket WiFi is a portable WiFi from SolaX Power. A security vulnerability exists in SolaX Pocket WiFi version 3 through 3.001.02, which stems from a WiFi network that provides a web-based configuration utility and an unauthenticated ModBus protocol interface...

CVE-2023-35835: Undefined Security Weakness

An issue was discovered in SolaX Pocket WiFi 3 through 3.001.02. The device provides a WiFi access point for initial configuration. The WiFi network provided has no network authentication such as an encryption key and persists permanently, including after enrollment and setup is complete. The WiF...