CVE-2026-51539

HighCVSS 7.5

Published: 13/07/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.34%

27th percentile - higher than 27% of all known CVEs

Summary

A Denial of Service (DoS) vulnerability exists in libmodbus 3.1.12 on Windows due to improper timeout management during network read operations in the receive loop.

Risk Assessment

An attacker can cause service unavailability for applications using libmodbus on Windows, disrupting communication with industrial devices and potentially causing production downtime.

Recommendation

Update libmodbus to the latest patched version. If not possible, restrict network access to applications using libmodbus to trusted networks only.

Other vulnerabilities in libmodbus

CVE-2024-10918Medium
Stack-based Buffer Overflow in libmodbus v3.1.10 allows overflow of the buffer allocated for Modbus response if the function tries to reply to a request with unexpected length.

Original NVD description (English source)

A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. The issue stems from improper timeout management during network read operations.