Junglewise Threat Intelligence

CVE-2025-26858: A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted set of netw

CVE-2025-26858 · Severity: high · CVSS 8.6 · Published 2025-12-01

Technologies: Socomec Diris M-70, Socomec Diris M-70 Firmware. Vendors: Socomec.

Executive brief

A buffer overflow vulnerability exists in the Modbus TCP functionality of Socomec DIRIS Digiware M-70 1.6.9. A specially crafted set of network packets can lead to denial of service. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.

Affected products

  • socomec diris_m-70
  • socomec diris_m-70_firmware

Related threats