Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 313

Export CSV
CVE-2026-125612

DIAEnergie - SQL Injection Vulnerability

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Deltaww DIAEnergie allows SQL Injection. This issue affects DIAEnergie: before 1.11.01.032.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-1952

Denial of service via the undocumented subfunction in AS320T

Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
As320t As320t Firmware
CVE-2026-105228

ISPSoft Out-of-Bounds Read Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Ispsoft
CVE-2026-105227

ISPSoft Out-of-Bounds Read Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.

CVSS 4.0 · 7 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Ispsoft
CVE-2026-78309

SQL Injection in DIAEnergie

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-78308

Authentication Bypass in DIAEnergie

Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-78312

Path Traversal in DIAEnergie

Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-78310

Authorization Bypass Through User-Controlled Key in DIAEnergie

Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-78313

Improper Access Control in DIAEnergie

Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-78311

SQL Injection in DIAEnergie

SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-78317

DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-78316

DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-78315

DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-78314

DIAEnergie - SQL Injection

SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2026-12575

DVP80ES3 Improper Resource Shutdown or Release Vulnerability

DVP80ES3 with  Improper Resource Shutdown or Release vulnerability.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Dvp80es3
CVE-2026-12576

DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability

DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Dvp80es3
CVE-2026-12577

DVP80ES3 Improperly Implemented Security Check for Standard vulnerability

DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Dvp80es3
CVE-2026-12818

DVP-12SE Exposure of Sensitive Information Vulnerability

Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Dvp-12se
CVE-2026-12819

DVP-12SE Missing Authentication and Unauthorized Write access Vulnerability

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Dvp-12se
CVE-2026-12578

DTMSoft - Deserialization of Untrusted Data Vulnerability

The affected product is vulnerable to a deserialization of untrusted data, which may allow an attacker to execute arbitrary code.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Dtmsoft