CVE-2026-105228: CWE-125 Out-of-bounds read in Deltaww ISPSoft

CVE-2026-105228 is an out-of-bounds read vulnerability (CWE-125) in Deltaww ISPSoft. It enables remote attackers to read memory outside the intended bounds, potentially disclosing sensitive information. The vulnerability affects all versions from 0 up to but excluding 3.25. The CVSS 4.0 score is 7.0, indicating high severity, with attack vector network, low attack complexity, no privileges required, and user interaction required. The vulnerability impacts confidentiality with high impact and low impact on integrity and no impact on availability. No official patch or vendor advisory is provided in the data.

Remote attackers can exploit this vulnerability to disclose sensitive information from affected ISPSoft installations. The confidentiality impact is high, while integrity and availability impacts are low or none. There is no evidence of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, limit exposure by restricting network access to ISPSoft installations and monitoring for suspicious activity. No official fix or temporary workaround is currently documented.