SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-44092

CRITICAL · CVSS 9.1 EPSS 0.42%

Source: NVD + CISA KEV + EPSS · Published 2026-07-30 · Last synced 2026-08-29

CyberRota Analysis

AI-Generated

The ModbusServer application is vulnerable due to inadequate input validation of data fetched from MQTT, allowing unauthenticated remote attackers to inject malicious input. This can result in significant integrity and availability issues, making it critical for organizations using this application to prioritize remediation efforts. Immediate action is essential for any entity relying on ModbusServer to safeguard their operational integrity.

CVE
CVE-2026-44092
Severity
CRITICAL
CVSS
9.1
EPSS
0.42%

Original NVD Description

An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. This may lead to integrity and availability loss.