← CVE Intelligence

CVE-2026-35227

Improper resource management in CODESYS Modbus TCP Server PUBLISHED

Description (CNA)

An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is successfully exploited, preventing legitimate clients from establishing new connections.

Affected (CNA)

Vendor / productVersions
CODESYS / CODESYS Modbusaffected 1.0.0.0 before 4.6.0.0

CWE

CWE-772

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.