By year
18
19
20
21
22
23
26
Bars are flaws published each year; the red part is the share attackers have used.
Latest high and critical flaws
- CVE-2026-105228 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.High 7 · Oct 15, 2026
- CVE-2026-105227 This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.High 7 · Oct 15, 2026
- CVE-2026-78312 Path Traversal in DIAEnergie.Critical 9.1 · Sep 24, 2026
- CVE-2026-78311 SQL Injection vulnerability in DIAEnergie.High 8.8 · Sep 24, 2026
- CVE-2026-78309 SQL Injection vulnerability in DIAEnergie.High 8.8 · Sep 24, 2026
- CVE-2026-78308 Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass.Critical 9.8 · Sep 24, 2026
- CVE-2026-78317 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.High 8.8 · Aug 24, 2026
- CVE-2026-78316 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.High 8.8 · Aug 24, 2026
- CVE-2026-78315 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.High 8.8 · Aug 24, 2026
- CVE-2026-78314 SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.High 8.8 · Aug 24, 2026
- CVE-2026-12577 DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.High 8.7 · Jul 1, 2026
- CVE-2026-12576 DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability.High 7.5 · Jul 1, 2026
- CVE-2026-12575 DVP80ES3 with Improper Resource Shutdown or Release vulnerability.High 7.5 · Jul 1, 2026
- CVE-2026-14193 DVP80ES300T with Improper Validation of Array IndexHigh 7.5 · Jul 1, 2026
- CVE-2026-12579 AS228T with Authentication BypassHigh 7.4 · Jul 1, 2026
- CVE-2026-12578 The affected product is vulnerable to a deserialization of untrusted data, which may allow an attacker to execute arbitrary code.High 8.4 · Jun 30, 2026
- CVE-2026-12819 Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interactioCritical 9.3 · Jun 30, 2026
- CVE-2026-12818 Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service.Critical 9.3 · Jun 30, 2026
- CVE-2026-1952 Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.Critical 9.8 · Apr 24, 2026
- CVE-2026-1951 Delta Electronics AS320T has no checking of the length of the buffer with the directory name vulnerability.Critical 9.8 · Apr 24, 2026
- CVE-2026-1950 Delta Electronics AS320T has No checking of the length of the buffer with the file name vulnerability.Critical 9.8 · Apr 24, 2026
- CVE-2026-1949 Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service.Critical 9.8 · Apr 24, 2026
- CVE-2026-5726 ASDA-Soft Stack-based Buffer OverflowHigh 7.8 · Apr 7, 2026
- CVE-2026-3631 Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability.High 7.5 · Mar 9, 2026
- CVE-2026-3630 Delta Electronics COMMGR2 has Stack-based Buffer Overflow vulnerability.Critical 9.8 · Mar 9, 2026
Part of our vulnerability database: the whole National Vulnerability Database plus CISA’s exploited list, refreshed twice a day. This is general guidance, not a review of your systems.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.