Threat database

AS228T with Authentication Bypass Vulnerability

DTMSoft by deltaww is affected by a deserialization of untrusted data vulnerability (CWE-502) that could allow an attacker to execute arbitrary code. This vulnerability has a high severity score of 8.4 (CVSS 4.0) and requires local attack vector with low complexity. No official patch or remediation details are provided. The product versions affected include all versions. There are no known exploits in the wild at this time.

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions.

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service.

CVE-2026-1951 is a critical stack-based buffer overflow vulnerability in the Delta Electronics AS320T device. The issue arises because the product does not properly check the length of a buffer associated with directory names, leading to potential memory corruption. This vulnerability has a CVSS score of 9.8, indicating high severity with network attack vector, no privileges required, and impacts on confidentiality, integrity, and availability. The affected product is a cloud service, and a patch is available. There are no known exploits in the wild at this time.

CVE-2026-1952 is a critical vulnerability in the Delta Electronics AS320T cloud service involving an undocumented subfunction that can cause denial of service. The vulnerability is classified under CWE-912 (Hidden Functionality). It has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability without requiring privileges or user interaction. A patch is available, and since this is a cloud service, the vendor manages remediation server-side. No known exploits are reported in the wild at this time.

Delta Electronics AS320T device contains a stack-based buffer overflow vulnerability due to lack of length checking on a buffer related to file names. This vulnerability has a critical CVSS score of 9.8, indicating it can be exploited remotely without privileges or user interaction, leading to full confidentiality, integrity, and availability compromise. The affected product is a cloud service, and a patch is available. There are no known exploits in the wild at this time.

Delta Electronics AS320T contains a critical vulnerability due to incorrect calculation of buffer size on the stack in the GET/PUT request handler of its web service. This flaw can lead to severe impacts including full confidentiality, integrity, and availability compromise. The vulnerability has a CVSS score of 9.8, indicating critical severity. The affected product is a cloud service, and a patch is available. There are no known exploits in the wild at this time.

CVE-2026-5726 is a high-severity stack-based buffer overflow vulnerability in the DeltaWW ASDA-Soft product. It requires local access and user interaction to exploit. Successful exploitation could allow arbitrary code execution, denial of service, or compromise of confidentiality and integrity. The vulnerability has a CVSS 3.1 base score of 7.8. No official patch or remediation guidance is currently available from the vendor. There are no known exploits in the wild at this time.

Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability.

Delta Electronics COMMGR2 has Stack-based Buffer Overflow vulnerability.

CVE-2026-3094 is a high-severity vulnerability in Delta Electronics CNCSoft-G2 caused by improper validation of user-supplied files. Opening a malicious file can lead to an out-of-bounds write, allowing an attacker to execute code within the context of the current process. The vulnerability has a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently provided by the vendor. There are no known exploits in the wild at this time.