CVE-2026-0667

CriticalCVSS 9.3

Published: 29/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 29/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.37%

30th percentile - higher than 30% of all known CVEs

Summary

A CWE-754 vulnerability (improper check for unusual or exceptional conditions) exists in Modbus TCP communication, which can lead to remote code execution, denial of service, and loss of confidentiality and integrity.

Risk Assessment

An attacker can remotely execute code, cause system crashes, or access sensitive data, threatening industrial infrastructure security.

Recommendation

Apply patches provided by the vendor of the software using Modbus TCP.

Original NVD description (English source)

CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & integrity when communicating over the Modbus TCP protocol.