CVE Program partner

Deltaww

Delta Electronics, Inc.

API
CVEs, 365 days3872 all time, 0 rejected
Quality99%median 99%
CVSS by the CNA100%share of records
CWE97%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationDelta Electronics, Inc.
RoleCNA
TypeVendor
Reports toicscert → CISA
ScopeDelta Electronics products as listed on <a href='https://www.deltaww.com' target='_blank'>www.deltaww.com</a>.
Advisorieshttps://www.deltaww.com/en-US/Cybersecurity_Advisory

Latest CVEs · RSS

  • CVE-2026-105228 2026-10-16 · CVSS 7.0
    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.
  • CVE-2026-105227 2026-10-16 · CVSS 7.0
    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.
  • CVE-2026-78313 2026-09-24 · CVSS 6.5
    Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
  • CVE-2026-78312 2026-09-24 · CVSS 9.1
    Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
  • CVE-2026-78310 2026-09-24 · CVSS 4.3
    Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
  • CVE-2026-78311 2026-09-24 · CVSS 8.8
    SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
  • CVE-2026-78309 2026-09-24 · CVSS 8.8
    SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
  • CVE-2026-78308 2026-09-24 · CVSS 9.8
    Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022.
  • CVE-2026-78317 2026-08-24 · CVSS 8.8
    SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
  • CVE-2026-78316 2026-08-24 · CVSS 8.8
    SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
  • CVE-2026-78315 2026-08-24 · CVSS 8.8
    SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
  • CVE-2026-78314 2026-08-24 · CVSS 8.8
    SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
  • CVE-2026-12577 2026-07-01 · CVSS 8.7
    DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.
  • CVE-2026-12576 2026-07-01 · CVSS 7.5
    DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability.
  • CVE-2026-12575 2026-07-01 · CVSS 7.5
    DVP80ES3 with  Improper Resource Shutdown or Release vulnerability.
  • CVE-2026-14193 2026-07-01 · CVSS 7.5
    DVP80ES300T with Improper Validation of Array Index Vulnerability
  • CVE-2026-12579 2026-07-01 · CVSS 7.4
    AS228T with Authentication Bypass Vulnerability
  • CVE-2026-12578 2026-06-30 · CVSS 8.4
    The affected product is vulnerable to a deserialization of untrusted data, which may allow an attacker to execute arbitrary code.
  • CVE-2026-12819 2026-06-30 · CVSS 9.3
    Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interactio
  • CVE-2026-12818 2026-06-30 · CVSS 9.3
    Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service.
  • CVE-2026-1951 2026-04-24 · CVSS 9.8
    Delta Electronics AS320T has no checking of the length of the buffer with the directory name vulnerability.
  • CVE-2026-1952 2026-04-24 · CVSS 9.8
    Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.
  • CVE-2026-1950 2026-04-24 · CVSS 9.8
    Delta Electronics AS320T has No checking of the length of the buffer with the file name vulnerability.
  • CVE-2026-1949 2026-04-24 · CVSS 9.8
    Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service.
  • CVE-2026-5726 2026-04-08 · CVSS 7.8
    ASDA-Soft Stack-based Buffer Overflow Vulnerability

All CVE Program partners