CVE-2026-12818: CWE-770 Allocation of resources without limits or throttling in deltaww DVP-12SE
Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service.
AI Analysis
Technical Summary
CVE-2026-12818 is a resource allocation vulnerability classified under CWE-770 affecting Delta Electronics DVP12SE PLCs. The flaw exists in the Modbus TCP service where resource allocation occurs without limits or throttling, which could lead to denial of service conditions by exhausting system resources. The vulnerability is remotely exploitable without authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The vendor has not published any patch or remediation details, and no exploits are currently known in the wild.
Potential Impact
Successful exploitation can cause resource exhaustion on affected DVP12SE PLC devices, potentially leading to denial of service or degraded operational availability. Given the critical CVSS score and the nature of the vulnerability, impacted industrial control systems may experience significant disruption.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider limiting network exposure of the Modbus TCP service and applying network-level protections to restrict access to trusted sources only.
CVE-2026-12818: CWE-770 Allocation of resources without limits or throttling in deltaww DVP-12SE
Description
Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service.
CVSS v4.0
Score 9.3critical
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-12818 is a resource allocation vulnerability classified under CWE-770 affecting Delta Electronics DVP12SE PLCs. The flaw exists in the Modbus TCP service where resource allocation occurs without limits or throttling, which could lead to denial of service conditions by exhausting system resources. The vulnerability is remotely exploitable without authentication or user interaction, as indicated by the CVSS vector (AV:N/AC:L/PR:N/UI:N). The vendor has not published any patch or remediation details, and no exploits are currently known in the wild.
Potential Impact
Successful exploitation can cause resource exhaustion on affected DVP12SE PLC devices, potentially leading to denial of service or degraded operational availability. Given the critical CVSS score and the nature of the vulnerability, impacted industrial control systems may experience significant disruption.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider limiting network exposure of the Modbus TCP service and applying network-level protections to restrict access to trusted sources only.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Deltaww
- Date Reserved
- 2026-06-21T10:18:09.710Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a436e8027e9c797194c9ea1
Added to database: 06/30/2026, 07:21:36 UTC
Last enriched: 07/07/2026, 12:00:32 UTC
Last updated: 08/14/2026, 13:28:20 UTC
Views: 124
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.