8.2
High
CVE-2026-35227 An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a…
Description
An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is successfully exploited, preventing legitimate clients from establishing new connections.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CODESYS Modbus 1.0 | 1.0.0.0 → < 4.6.0.0 | 4.6.0.0 |