CVE-2025-26858

High · 7.5

CVSS

7.5

EPSS

0.6%

Published

Dec 1, 2025

CISA due date

—

The record

A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted set of network packets can lead to denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

Affected packages

Ecosystem	Package	Introduced	Fixed