Intel

AIKIDO-2026-10208

pymodbus is vulnerable to Denial of Service (DoS)

Denial of Service (DoS) Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
Published Feb 21, 2026

28

Low Risk

This Affects:

PYTHONpymodbus
3.4.0 - 3.11.4
Fixed in 3.12.0
Are you affected? Scan for Free

TL;DR

Affected versions of this package are vulnerable to a denial-of-service (DoS) condition. Improper handling of incoming requests in the server component can allow a malicious client to trigger excessive resource consumption, causing the service to become unresponsive.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range.

Background info

pymodbus is vulnerable to Denial of Service (DoS) in versions 3.4.0 - 3.11.4.

How to fix this

Upgrade the pymodbus library to the patch version.