<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Delta Electronics, Inc. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/deltaww" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Delta Electronics, Inc. (deltaww).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/deltaww.png</url>
      <title>Delta Electronics, Inc. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-105228 · 7 HIGH 🌩️ — ISPSoft Out-of-Bounds Read Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-105228</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-105228</guid>
      <description>This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 16 Oct 2026 01:27:55 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-105227 · 7 HIGH 🌩️ — ISPSoft Out-of-Bounds Read Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-105227</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-105227</guid>
      <description>This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 16 Oct 2026 01:27:28 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-78313 · 6.5 MEDIUM — Improper Access Control in DIAEnergie</title>
      <link>https://vulnogram.org/CVE-2026-78313</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78313</guid>
      <description>Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.</description>
      <category>Medium</category>
      <pubDate>Thu, 24 Sep 2026 08:56:51 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-78312 · 9.1 CRITICAL 🌩️ — Path Traversal in DIAEnergie</title>
      <link>https://vulnogram.org/CVE-2026-78312</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78312</guid>
      <description>Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 24 Sep 2026 08:52:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-78310 · 4.3 MEDIUM — Authorization Bypass Through User-Controlled Key in DIAEnergie</title>
      <link>https://vulnogram.org/CVE-2026-78310</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78310</guid>
      <description>Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.</description>
      <category>Medium</category>
      <pubDate>Thu, 24 Sep 2026 08:50:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-78311 · 8.8 HIGH — SQL Injection in DIAEnergie</title>
      <link>https://vulnogram.org/CVE-2026-78311</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78311</guid>
      <description>SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.</description>
      <category>High</category>
      <pubDate>Thu, 24 Sep 2026 08:42:17 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-78309 · 8.8 HIGH — SQL Injection in DIAEnergie</title>
      <link>https://vulnogram.org/CVE-2026-78309</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78309</guid>
      <description>SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.</description>
      <category>High</category>
      <pubDate>Thu, 24 Sep 2026 08:39:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-78308 · 9.8 CRITICAL 🌩️ — Authentication Bypass in DIAEnergie</title>
      <link>https://vulnogram.org/CVE-2026-78308</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78308</guid>
      <description>Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 24 Sep 2026 08:35:58 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-78317 · 8.8 HIGH — DIAEnergie - SQL Injection</title>
      <link>https://vulnogram.org/CVE-2026-78317</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78317</guid>
      <description>SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.</description>
      <category>High</category>
      <pubDate>Mon, 24 Aug 2026 09:34:58 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-78316 · 8.8 HIGH — DIAEnergie - SQL Injection</title>
      <link>https://vulnogram.org/CVE-2026-78316</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78316</guid>
      <description>SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.</description>
      <category>High</category>
      <pubDate>Mon, 24 Aug 2026 09:34:38 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-78315 · 8.8 HIGH — DIAEnergie - SQL Injection</title>
      <link>https://vulnogram.org/CVE-2026-78315</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78315</guid>
      <description>SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.</description>
      <category>High</category>
      <pubDate>Mon, 24 Aug 2026 09:34:21 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-78314 · 8.8 HIGH — DIAEnergie - SQL Injection</title>
      <link>https://vulnogram.org/CVE-2026-78314</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78314</guid>
      <description>SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.</description>
      <category>High</category>
      <pubDate>Mon, 24 Aug 2026 09:33:51 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-12577 · 8.7 HIGH 🌩️ — DVP80ES3 Improperly Implemented Security Check for Standard vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-12577</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-12577</guid>
      <description>DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 01 Jul 2026 07:05:25 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-12576 · 7.5 HIGH 🌩️ — DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-12576</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-12576</guid>
      <description>DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 01 Jul 2026 07:01:17 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-12575 · 7.5 HIGH 🌩️ — DVP80ES3 Improper Resource Shutdown or Release Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-12575</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-12575</guid>
      <description>DVP80ES3 with Improper Resource Shutdown or Release vulnerability.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 01 Jul 2026 06:55:18 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-14193 · 7.5 HIGH 🌩️ — DVP80ES300T - Improper Validation of Array Index Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-14193</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-14193</guid>
      <description>DVP80ES300T with Improper Validation of Array Index Vulnerability</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 01 Jul 2026 05:30:54 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-12579 · 7.4 HIGH 🌩️ — AS228T - Authentication Bypass Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-12579</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-12579</guid>
      <description>AS228T with Authentication Bypass Vulnerability</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 01 Jul 2026 05:22:38 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-12578 · 8.4 HIGH — DTMSoft - Deserialization of Untrusted Data Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-12578</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-12578</guid>
      <description>The affected product is vulnerable to a deserialization of untrusted data, which may allow an attacker to execute arbitrary code.</description>
      <category>High</category>
      <pubDate>Tue, 30 Jun 2026 07:20:59 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-12819 · 9.3 CRITICAL 🌩️ — DVP-12SE Missing Authentication and Unauthorized Write access Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-12819</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-12819</guid>
      <description>Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 30 Jun 2026 06:28:51 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-12818 · 9.3 CRITICAL 🌩️ — DVP-12SE Exposure of Sensitive Information Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-12818</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-12818</guid>
      <description>Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 30 Jun 2026 06:24:11 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-1951 · 9.8 CRITICAL 🌩️ — No checking of the length of the buffer with the directory name in AS320T</title>
      <link>https://vulnogram.org/CVE-2026-1951</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-1951</guid>
      <description>Delta Electronics AS320T has no checking of the length of the buffer with the directory name vulnerability.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 24 Apr 2026 06:13:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-1952 · 9.8 CRITICAL 🌩️ — Denial of service via the undocumented subfunction in AS320T</title>
      <link>https://vulnogram.org/CVE-2026-1952</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-1952</guid>
      <description>Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 24 Apr 2026 06:08:58 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-1950 · 9.8 CRITICAL 🌩️ — No checking of the length of the buffer with the file name in AS320T</title>
      <link>https://vulnogram.org/CVE-2026-1950</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-1950</guid>
      <description>Delta Electronics AS320T has No checking of the length of the buffer with the file name vulnerability.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 24 Apr 2026 05:56:52 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-1949 · 9.8 CRITICAL 🌩️ — Incorrect calculation of buffer size on the stack in AS320T</title>
      <link>https://vulnogram.org/CVE-2026-1949</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-1949</guid>
      <description>Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 24 Apr 2026 05:50:48 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-5726 · 7.8 HIGH — ASDA-Soft Stack-based Buffer Overflow Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-5726</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-5726</guid>
      <description>ASDA-Soft Stack-based Buffer Overflow Vulnerability</description>
      <category>High</category>
      <pubDate>Wed, 08 Apr 2026 01:46:51 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-3631 · 7.5 HIGH 🌩️ — Buffer Over-read DoS Vulnerability in COMMGR2</title>
      <link>https://vulnogram.org/CVE-2026-3631</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-3631</guid>
      <description>Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Mar 2026 02:56:06 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-3630 · 9.8 CRITICAL 🌩️ — Stack-based Buffer Overflow Vulnerability in COMMGR2</title>
      <link>https://vulnogram.org/CVE-2026-3630</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-3630</guid>
      <description>Delta Electronics COMMGR2 has Stack-based Buffer Overflow vulnerability.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Mon, 09 Mar 2026 02:49:40 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-3094 · 7.8 HIGH — File Parsing Out-Of-Bounds Write in CNCSoft-G2</title>
      <link>https://vulnogram.org/CVE-2026-3094</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-3094</guid>
      <description>Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.</description>
      <category>High</category>
      <pubDate>Wed, 04 Mar 2026 08:36:29 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-1361 · 7.8 HIGH — ASDA-Soft Stack-based Buffer Overflow Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-1361</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-1361</guid>
      <description>ASDA-Soft Stack-based Buffer Overflow Vulnerability</description>
      <category>High</category>
      <pubDate>Tue, 27 Jan 2026 03:11:57 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-0975 · 7.8 HIGH — DIAView - Command Injection Vulnerability</title>
      <link>https://vulnogram.org/CVE-2026-0975</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-0975</guid>
      <description>Delta Electronics DIAView has Command Injection vulnerability.</description>
      <category>High</category>
      <pubDate>Fri, 16 Jan 2026 06:01:59 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-62581 · 9.8 CRITICAL 🌩️ — DIAView - Authentication Bypass Vulnerability</title>
      <link>https://vulnogram.org/CVE-2025-62581</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-62581</guid>
      <description>Delta Electronics DIAView has multiple vulnerabilities.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 16 Jan 2026 02:20:04 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-62582 · 9.8 CRITICAL 🌩️ — DIAView - Authentication Bypass Vulnerability</title>
      <link>https://vulnogram.org/CVE-2025-62582</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-62582</guid>
      <description>Delta Electronics DIAView has multiple vulnerabilities.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 16 Jan 2026 02:03:22 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-15359 · 9.1 CRITICAL 🌩️ — DVP-12SE11T - Out-of-bound memory write Vulnerability</title>
      <link>https://vulnogram.org/CVE-2025-15359</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-15359</guid>
      <description>DVP-12SE11T - Out-of-bound memory write Vulnerability</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 30 Dec 2025 09:07:04 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-15358 · 7.5 HIGH 🌩️ — DVP-12SE11T - Denial of Service Vulnerability</title>
      <link>https://vulnogram.org/CVE-2025-15358</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-15358</guid>
      <description>DVP-12SE11T - Denial of Service Vulnerability</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 30 Dec 2025 09:04:41 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-15103 · 8.1 HIGH 🌩️ — DVP-12SE11T - Authentication Bypass via Partial Password Disclosure</title>
      <link>https://vulnogram.org/CVE-2025-15103</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-15103</guid>
      <description>DVP-12SE11T - Authentication Bypass via Partial Password Disclosure</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 30 Dec 2025 08:55:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-15102 · 9.1 CRITICAL 🌩️ — DVP-12SE11T - Password Protection Bypass</title>
      <link>https://vulnogram.org/CVE-2025-15102</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-15102</guid>
      <description>DVP-12SE11T - Password Protection Bypass</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Tue, 30 Dec 2025 08:48:31 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-62578 · 7.2 HIGH — DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information</title>
      <link>https://vulnogram.org/CVE-2025-62578</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-62578</guid>
      <description>DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information</description>
      <category>High</category>
      <pubDate>Fri, 26 Dec 2025 06:05:01 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-59301 · 4 MEDIUM — Modbus/TCP Dos Vulnerability in DVP15MC11T</title>
      <link>https://vulnogram.org/CVE-2025-59301</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-59301</guid>
      <description>Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service.</description>
      <category>Medium</category>
      <pubDate>Mon, 22 Dec 2025 02:56:42 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-62580 · 7.8 HIGH — ASDA-Soft Stack-based Buffer Overflow Vulnerability</title>
      <link>https://vulnogram.org/CVE-2025-62580</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-62580</guid>
      <description>ASDA-Soft Stack-based Buffer Overflow Vulnerability</description>
      <category>High</category>
      <pubDate>Thu, 16 Oct 2025 01:33:35 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-62579 · 7.8 HIGH — ASDA-Soft Stack-based Buffer Overflow Vulnerability</title>
      <link>https://vulnogram.org/CVE-2025-62579</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-62579</guid>
      <description>ASDA-Soft Stack-based Buffer Overflow Vulnerability</description>
      <category>High</category>
      <pubDate>Thu, 16 Oct 2025 01:31:38 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-59300 · 6.8 MEDIUM — File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen</title>
      <link>https://vulnogram.org/CVE-2025-59300</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-59300</guid>
      <description>Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.</description>
      <category>Medium</category>
      <pubDate>Fri, 03 Oct 2025 02:24:40 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-59299 · 6.8 MEDIUM — File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen</title>
      <link>https://vulnogram.org/CVE-2025-59299</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-59299</guid>
      <description>Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.</description>
      <category>Medium</category>
      <pubDate>Fri, 03 Oct 2025 02:24:30 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-59298 · 6.8 MEDIUM — File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen</title>
      <link>https://vulnogram.org/CVE-2025-59298</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-59298</guid>
      <description>Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.</description>
      <category>Medium</category>
      <pubDate>Fri, 03 Oct 2025 02:22:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-59297 · 6.8 MEDIUM — File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen</title>
      <link>https://vulnogram.org/CVE-2025-59297</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-59297</guid>
      <description>Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.</description>
      <category>Medium</category>
      <pubDate>Fri, 03 Oct 2025 02:21:47 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-58319 · 7.8 HIGH — File Parsing Memory Corruption in CNCSoft-G2</title>
      <link>https://vulnogram.org/CVE-2025-58319</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-58319</guid>
      <description>Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.</description>
      <category>High</category>
      <pubDate>Wed, 24 Sep 2025 06:42:08 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-58317 · 7.8 HIGH — File Parsing Memory Corruption in CNCSoft-G2</title>
      <link>https://vulnogram.org/CVE-2025-58317</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-58317</guid>
      <description>Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.</description>
      <category>High</category>
      <pubDate>Wed, 24 Sep 2025 06:38:43 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-58320 · 7.3 HIGH 🌩️ — DIALink - Directory Traversal Authentication Bypass Vulnerability</title>
      <link>https://vulnogram.org/CVE-2025-58320</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-58320</guid>
      <description>Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 11 Sep 2025 08:51:49 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-58321 · 10 CRITICAL 🌩️ — DIALink - Directory Traversal Authentication Bypass Vulnerability</title>
      <link>https://vulnogram.org/CVE-2025-58321</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-58321</guid>
      <description>Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Thu, 11 Sep 2025 08:50:12 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-58318 · 5.8 MEDIUM — DIAView - Authentication Bypass Vulnerability</title>
      <link>https://vulnogram.org/CVE-2025-58318</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-58318</guid>
      <description>Delta Electronics DIAView has an authentication bypass vulnerability.</description>
      <category>Medium</category>
      <pubDate>Mon, 01 Sep 2025 07:23:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2025-53419 · 7.8 HIGH — COMMGR Code Injection Vulnerability</title>
      <link>https://vulnogram.org/CVE-2025-53419</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-53419</guid>
      <description>Delta Electronics COMMGR has Code Injection vulnerability.</description>
      <category>High</category>
      <pubDate>Tue, 26 Aug 2025 07:02:43 GMT</pubDate>
    </item>
  </channel>
</rss>
