ZDI-CAN-27843 HIGH 7.8 Upcoming Jan 22, 2026

Delta Electronics

Delta Electronics, a major industrial automation and power management company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no authentication to exploit, potentially allowing attackers with local access to compromise confidentiality, integrity, and availability. The vulnerability can be triggered through user interaction on a local system without elevated privileges, making it particularly dangerous in shared or compromised environments. Security teams should monitor for this advisory through April 2026 and prioritize patching once the vendor releases fixes, especially for systems in critical infrastructure environments where Delta products are commonly deployed.

Advisory Details
Researcher Discovered by: kimiya
Reported January 22, 2026
Deadline April 22, 2026 5d
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy