CVE-2026-51539

Published Jul 13, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. The issue stems from improper timeout management during network read operations.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Title Denial of Service via Improper Timeout in libmodbus 3.1.12 on Windows
Type Values Removed Values Added
Title Denial of Service via Improper Timeout in libmodbus 3.1.12 on Windows
Type Values Removed Values Added
Title Denial of Service via Unbounded Timeout in libmodbus 3.1.12 on Windows
Type Values Removed Values Added
Title Denial of Service via Unbounded Timeout in libmodbus 3.1.12 on Windows
Type Values Removed Values Added
Title Denial of Service via Improper Timeout Management in libmodbus 3.1.12 on Windows
Type Values Removed Values Added
Title Denial of Service via Improper Timeout Management in libmodbus 3.1.12 on Windows
Type Values Removed Values Added
Weaknesses CWE-400
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description A Denial of Service (DoS) vulnerability exists in the receive loop of libmodbus 3.1.12 when running on Windows. The issue stems from improper timeout management during network read operations.
References

Subscriptions

No data.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Jul 14, 2026, 1:08 PM
Reserved
Jun 8, 2026, 12:00 AM
Status
Deferred
Published
Jul 13, 2026, 10:16 PM
Modified
Jul 15, 2026, 8:27 PM