CVE-2024-51364: Gelcon Modbusmechanic

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in ModbusMechanic v3.0 allows attackers to execute arbitrary code via uploading a crafted .xml file.

Affected products

• Gelcon Modbusmechanic: up to and including 3.0

Published 2024-11-21. Last modified 2026-07-05.