CVE-2026-44092

CriticalCVSS 9.1

Published: 30/07/2026(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

31th percentile - higher than 31% of all known CVEs

Summary

An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate input fetched from MQTT. This may lead to integrity and availability loss.

Risk Assessment

Risk includes disruption of Modbus system operation and data integrity compromise.

Recommendation

Add input validation in the ModbusServer application for all data coming from MQTT.

Original NVD description (English source)

An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss.