VULNERABILITY INTELLIGENCE
CVE-2026-44092
CVSS score9.1 CRITICAL
EPSS probability0.68%
CISA KEVNot currently listed
Published2026-07-30
Last modified2026-07-30
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Description
An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss.
Weakness classification
- info@cert.vde.com: CWE-93