Vulnerabilities

TI-2026-82975 CVE-2026-22110 · GHSA-5fcx-qv97-pcff

Missing authentication check on POST and PUT requests in Delta UFC500

LOW 39

The web server does not check authentication on POST or PUT.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.0024 Published 2026-10-30 Fixed in 2.4.18, 4.4.1 CWE-306

TI-2026-82973 CVE-2026-22105 · GHSA-qgx4-4f35-7645

Default password derived from serial number in Delta UFC500

LOW 39

Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number.

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.00191 Published 2026-10-30 Fixed in 2.4.18, 4.4.1 CWE-1392

TI-2026-82974 CVE-2026-22109 · GHSA-pm3q-rpp8-c934

Default WebUI passwords stored in plaintext in Delta UFC500

LOW 35

The shipped WebUI template database retains the factory default passwords for all five account types in cleartext.

CVSS 4.0HIGH 8.4 Local Low privileges No interaction EPSS 0.00151 Published 2026-10-30 Fixed in 1.4.7 CWE-1392

TI-2026-82976 CVE-2026-22114 · GHSA-474v-rchr-jj2v

Missing brute-force protection in Delta Electronics UFC500 web interface

LOW 23

HTTP basic auth enforces no retry limit or backoff.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00185 Published 2026-10-30 Fixed in 4.4.2 CWE-307

TI-2026-01066 CVE-2026-1361 · GHSA-3hmm-3q3p-7x72

ASDA-Soft Stack-based Buffer Overflow Vulnerability

MEDIUM 44

ASDA-Soft Stack-based Buffer Overflow Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00593 Published 2026-01-27 No fix listed CWE-121

TI-2026-00739 CVE-2026-0975 · GHSA-7xx5-w679-mjw9

DIAView - Command Injection Vulnerability

MEDIUM 46

Delta Electronics DIAView has Command Injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01512 Published 2026-01-16 No fix listed CWE-77

TI-2025-38796 CVE-2025-62581 · GHSA-hwf7-8gr2-w4p2

DIAView - Authentication Bypass Vulnerability

MEDIUM 50

Delta Electronics DIAView has multiple vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0057 Published 2026-01-16 No fix listed CWE-321

TI-2025-38797 CVE-2025-62582 · GHSA-m548-798m-mgjv

DIAView - Authentication Bypass Vulnerability

MEDIUM 43

Delta Electronics DIAView has multiple vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00531 Published 2026-01-16 No fix listed CWE-306

TI-2025-14011 CVE-2025-15359 · GHSA-r9vp-476q-jq9f

DVP-12SE11T - Out-of-bound memory write Vulnerability

MEDIUM 48

DVP-12SE11T - Out-of-bound memory write Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00335 Published 2025-12-30 Fixed in 2.16 CWE-787

TI-2025-14010 CVE-2025-15358 · GHSA-8mp5-mgxf-j4qm

DVP-12SE11T - Denial of Service Vulnerability

LOW 39

DVP-12SE11T - Denial of Service Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00323 Published 2025-12-30 Fixed in 2.16 CWE-20

TI-2025-13781 CVE-2025-15103 · GHSA-4gxf-g52w-c267

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure

MEDIUM 43

DVP-12SE11T - Authentication Bypass via Partial Password Disclosure

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00344 Published 2025-12-30 Fixed in 2.16 CWE-200

TI-2025-13780 CVE-2025-15102 · GHSA-fvpq-c4rp-8p25

DVP-12SE11T - Password Protection Bypass

MEDIUM 48

DVP-12SE11T - Password Protection Bypass

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00317 Published 2025-12-30 Fixed in 2.16 CWE-288

TI-2025-38793 CVE-2025-62578 · GHSA-p8g3-7r42-x5c9

DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information

LOW 34

DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information

CVSS 4.0HIGH 7.2 Adjacent network No auth No interaction EPSS 0.00342 Published 2025-12-26 No fix listed CWE-319

TI-2025-36875 CVE-2025-59301 · GHSA-65px-wjwf-w4j6

Modbus/TCP Dos Vulnerability in DVP15MC11T

LOW 32

Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00221 Published 2025-12-22 Fixed in 1.16.0 CWE-20

TI-2025-38795 CVE-2025-62580 · GHSA-cwhj-2mf3-cxwv

ASDA-Soft Stack-based Buffer Overflow Vulnerability

LOW 35

ASDA-Soft Stack-based Buffer Overflow Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00203 Published 2025-10-16 No fix listed CWE-121

TI-2025-38794 CVE-2025-62579 · GHSA-5477-v6xm-8jp6

ASDA-Soft Stack-based Buffer Overflow Vulnerability

LOW 35

ASDA-Soft Stack-based Buffer Overflow Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00203 Published 2025-10-16 No fix listed CWE-121

TI-2025-36874 CVE-2025-59300 · GHSA-p7rw-c32g-qqhf

File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen

LOW 31

Delta Electronics DIAScreen lacks proper validation of the user-supplied file.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00186 Published 2025-10-03 Fixed in 1.6.1 CWE-787

TI-2025-36873 CVE-2025-59299 · GHSA-8hf4-29jf-xrq4

File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen

LOW 31

Delta Electronics DIAScreen lacks proper validation of the user-supplied file.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00161 Published 2025-10-03 Fixed in 1.6.1 CWE-787

TI-2025-36872 CVE-2025-59298 · GHSA-xx4c-ww79-386v

File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen

LOW 31

Delta Electronics DIAScreen lacks proper validation of the user-supplied file.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00161 Published 2025-10-03 Fixed in 1.6.1 CWE-787

TI-2025-36871 CVE-2025-59297 · GHSA-ghmg-8wjg-rrh7

File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen

LOW 31

Delta Electronics DIAScreen lacks proper validation of the user-supplied file.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00161 Published 2025-10-03 Fixed in 1.6.1 CWE-787

TI-2025-36120 CVE-2025-58319 · GHSA-886p-6f22-9279

File Parsing Memory Corruption in CNCSoft-G2

LOW 35

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00161 Published 2025-09-24 Fixed in 2.1.0.34 CWE-121

TI-2025-36118 CVE-2025-58317 · GHSA-crhw-293w-fwgm

File Parsing Memory Corruption in CNCSoft-G2

LOW 36

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00302 Published 2025-09-24 Fixed in 2.1.0.34 CWE-121

TI-2025-36121 CVE-2025-58320 · GHSA-359w-9vj6-rhm6

DIALink - Directory Traversal Authentication Bypass Vulnerability

MEDIUM 55

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.17306 Published 2025-09-11 No fix listed CWE-22

TI-2025-36122 CVE-2025-58321 · GHSA-9w85-hprg-c8rx

DIALink - Directory Traversal Authentication Bypass Vulnerability

MEDIUM 51

Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01297 Published 2025-09-11 No fix listed CWE-22

TI-2025-36119 CVE-2025-58318 · GHSA-6jw9-8fhm-rwm9

DIAView - Authentication Bypass Vulnerability

LOW 25

Delta Electronics DIAView has an authentication bypass vulnerability.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00161 Published 2025-09-01 No fix listed CWE-306

Vulnerabilities

Filters