EUVD-2026-102571
GHSA-v5j2-3gxr-xf48
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver malicious ISPSoft project file
-
ExploitEngineer opens file in ISPSoft
-
ExecutionTrigger out-of-bounds read in parser
-
ImpactDisclose adjacent memory / crash application
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, read limits
MITRE ATT&CK
1 technique across 1 tactic: Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires a user of Delta ISPSoft to actively open a specially crafted project or data file (CVSS UI:A), making this a client-side, file-parsing attack rather than remote service exploitation. There is no authentication requirement (PR:N), but the mandatory user interaction and the need for the attacker to deliver a malicious file to an engineering workstation are the primary limiting factors. Realistic risk is confined to environments where engineers open externally sourced ISPSoft project files; it does not affect unattended servers or default network-facing services. |
| Impact | This is a moderate-priority, client-side vulnerability rather than a mass-exploitable server flaw. The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:A) shows low attack complexity and no privileges required, but the UI:A (Active) user-interaction requirement is the decisive limiter: an engineer must be induced to open a malicious ISPSoft project/data file. Impact is mixed - VC:L (limited confidentiality/information disclosure) combined with VA:H (high availability impact), consistent with an out-of-bounds read (CWE-125) that can leak adjacent memory and/or crash the application. No EPSS score, CISA KEV listing, or public POC was provided, so there is no public exploit identified at time of analysis and no evidence of active exploitation. The 7.0 'High' rating is driven largely by the availability impact and network/no-auth metrics, but the mandatory user interaction and the niche OT/engineering-software deployment context substantially reduce real-world risk compared to a server-side pre-auth flaw. Note a minor tension to verify with the vendor: AV:N is assigned, yet the exploitation model is file-parsing in a desktop engineering tool, which is often closer to local/file-delivery - the network vector reflects delivery of the malicious file rather than direct remote service access. |
| Exploit ScenarioDerived | An attacker crafts a malicious ISPSoft project or data file and delivers it to a control-systems engineer via email, a shared drive, or a compromised project repository. When the victim opens the file in Delta ISPSoft, the parser performs an out-of-bounds read, disclosing fragments of process memory and/or crashing the application. No public exploit code is currently known, and exploitation requires the victim to actively open the attacker-supplied file. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 16, 2026
Out-of-bounds read in Delta ISPSoft can disclose limited sensitive memory contents and cause a high availability impact when a user opens a specially crafted project or data file. The vulnerability affects installations of the Delta ISPSoft engineering software (CPE cpe:2.3:a:deltaww:ispsoft:*:*:*:*:*:*:*:* indicates no version limitation in the supplied data) and is a client-side file-parsing issue requiring user interaction, not an unattended network service flaw. No public exploit identified at time of analysis; the independent assessment rates it as a moderate-priority, client-side exposure rather than a mass-exploitable server vulnerability.
RemediationAI
Upgrade Delta ISPSoft to the fixed version specified in the vendor advisory (Delta PCSA-2026-00016 at https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00016_ISPSoft%20Out-of-Bounds%20Read%20Vulnerability.pdf); the supplied intelligence does not include an exact fix version, so confirm the applicable release directly from Delta before deploying. As compensating controls, treat ISPSoft project and data files as untrusted executables: block or quarantine externally sourced .isp/project files at email and web gateways, require validation or vendor-signed files before opening, and disable automatic file preview/parsing where possible. Because exploitation needs an engineer to open a crafted file (UI:A/UI:R), train users not to open unexpected ISPSoft projects, run the tool with least privilege in a sandboxed or isolated VM to limit memory disclosure and crash impact, and restrict access to engineering workstations on the network. These controls have workflow trade-offs-file blocking may impede legitimate project transfers, and sandboxing or VM isolation can complicate PLC programming and hardware access-but they reduce the client-side attack surface when patching is delayed.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Delta ISPSoft is an engineering/programming tool for Delta programmable logic controllers and automation hardware. The flaw is CWE-125: Out-of-bounds Read, arising when the software parses project or data files and reads beyond the bounds of an allocated buffer. A successful malformed file can cause the application to disclose memory contents (confidentiality: low) and/or crash (availability: high), but the supplied CVSS vector shows no integrity or scope impact, so this is not assessed as remote code execution or a full system compromise. The CVSS:4.0 vector AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N and the independent CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H both indicate unauthenticated network delivery of the malicious file, but with mandatory user interaction; exploitation therefore depends on an engineer opening a crafted ISPSoft project/data file, not on exploiting a listening service. CPE cpe:2.3:a:deltaww:ispsoft:*:*:*:*:*:*:*:* points to all versions as affected in the absence of a narrower version range in the data, and the vendor advisory is Delta-PCSA-2026-00016.
Know when Ispsoft gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
File delivered over network but victim must open it (UI:R); no auth (PR:N); OOB read yields limited info disclosure (C:L) and can crash the app (A:H), no integrity impact.
Primary rating from Vendor (Deltaww).
CVSS VectorVendor: Deltaww
Lifecycle Timeline
2DescriptionCVE.org
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.
Executive ViewAI
A memory-handling flaw in Delta ISPSoft - the engineering software used to configure Delta automation hardware - can crash the application and expose small amounts of memory contents when an engineer opens a tampered project or data file. Because ISPSoft runs on engineering workstations that typically sit close to operational technology networks and are routinely used to exchange project files between sites, contractors, and integrators, the exposure is concentrated among automation and controls staff rather than the general user population. No public exploit has been identified, so this is a manageable but real exposure that warrants disciplined file-handling controls while the vendor works toward a fix.
No vendor-released patch identified at time of analysis. Interim mitigations: treat all externally sourced ISPSoft project and data files as untrusted; scan files with multi-engine malware tooling before opening; open untrusted projects only in an isolated, offline virtual machine or sandbox; restrict engineering workstations from email and general web browsing and segregate them from corporate networks; enforce application allowlisting and least-privilege access; and maintain offline backups of project files to recover quickly from a crash. Apply the vendor patch once released.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Related Vulnerabilities in Delta ISPSoft Out-of-Bounds Read Vulnerabilities
View all 2Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacke
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacke
Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacke
Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, an
An issue was discovered in Delta Electronics WPLSoft, Versions prior to V2.42.11, ISPSoft, Versions prior to 3.02.11, an
Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application
Exploit-DB