CVE-2026-71254

Summary

The flaw allows an attacker to perform an out-of-bounds write, leading to potential data corruption or system instability. This is critical because it can be exploited without user interaction and affects the Modbus server-side handle_read_file_record function.

Exploitability

Exploitation is relatively straightforward as no user interaction is required, and the attacker can send crafted Modbus requests to trigger the out-of-bounds write.

Blast radius

If exploited, the impact could be severe, potentially leading to data corruption, system crashes, or other critical failures in the affected system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to nanoMODBUS v1.23.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.