CVE-2026-1951 is a stack-based buffer overflow vulnerability (CWE-121) in the Delta Electronics AS320T product. The issue arises because the product does not check the length of the buffer when handling directory names, allowing an attacker to overflow the stack. This vulnerability has a CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating it is remotely exploitable without privileges or user interaction and can lead to complete compromise of confidentiality, integrity, and availability. The affected product is a cloud service, and a patch is available, though no vendor advisory details or patch links are provided. No known exploits have been reported in the wild.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code on the affected system, potentially leading to full system compromise including data theft, modification, or denial of service. The CVSS score of 9.8 reflects the critical nature of this vulnerability with high impact on confidentiality, integrity, and availability.

A patch is available for this vulnerability. Since the affected product is a cloud service, the vendor typically manages remediation server-side. Users should consult the vendor advisory for confirmation and ensure that the latest patches or updates are applied promptly to mitigate this vulnerability. There are currently no known exploits in the wild, but timely patching is strongly recommended.