Threat database

CVE-2026-105228 is a high-severity vulnerability in Deltaww ISPSoft that allows remote attackers to perform out-of-bounds reads, potentially disclosing sensitive information. It affects versions from 0 up to but not including 3.25. The vulnerability requires no privileges and no user interaction but has low attack complexity. There is no indication of active exploitation in the wild or available patches as of the publication date.

CVE-2026-105227 is a high-severity vulnerability in Deltaww ISPSoft that allows remote attackers to perform out-of-bounds reads, potentially disclosing sensitive information. It affects versions from 0 up to but not including 3.25. The vulnerability requires no privileges and no user interaction, but the attacker must be remote. There is no information about available patches or vendor advisories. No known exploits are reported in the wild.

Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

CVE-2026-78309 is a high-severity SQL Injection vulnerability in the Deltaww DIAEnergie product affecting versions before 1.11.00.022. The vulnerability allows an attacker with low privileges to execute arbitrary SQL commands remotely without user interaction, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system.

CVE-2026-78308 is an improper authentication vulnerability in Deltaww's DIAEnergie product that allows an attacker to bypass authentication. This critical severity flaw affects versions before 1.11.00.022. The vulnerability has a CVSS score of 9.8, indicating it is remotely exploitable without privileges or user interaction, and can lead to full confidentiality, integrity, and availability compromise.

CVE-2026-78317 is a high severity SQL Injection vulnerability in Delta DIAEnergie version 1.11.00.002. This flaw allows an attacker with network access and low privileges to execute arbitrary code remotely without user interaction. The vulnerability arises from improper neutralization of special elements in SQL commands, classified under CWE-89.

CVE-2026-78316 is a high-severity SQL Injection vulnerability in Delta DIAEnergie version 1.11.00.002. This flaw allows an attacker with low privileges to execute arbitrary code remotely by exploiting improper neutralization of special elements in SQL commands.

CVE-2026-78315 is a high-severity SQL Injection vulnerability in Delta DIAEnergie version 1.11.00.002. This flaw allows an attacker with low privileges to execute arbitrary code remotely by exploiting improper neutralization of special elements in SQL commands.

CVE-2026-78314 is a high-severity SQL Injection vulnerability in Delta DIAEnergie version 1.11.00.002. This flaw allows an attacker with low privileges to execute arbitrary code remotely by exploiting improper neutralization of special elements in SQL commands.

DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.

DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability.

DVP80ES3 with  Improper Resource Shutdown or Release vulnerability.

DVP80ES300T with Improper Validation of Array Index Vulnerability