AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Delta ElectronicsCVE-2026-78308

Delta Electronics DIAEnergie: improper authentication

Delta Electronics

CVE-2026-78308 · Published Sep 24, 2026

Critical9.8
Fix: upgrade to 1.11.00.022 or later
Delta Electronics advisory

Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass.

This issue affects DIAEnergie: before 1.11.00.022.

Affected versions

PackageAffectedFixed in
DIAEnergie
Product
< 1.11.00.0221.11.00.022
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-287

More Delta Electronics advisories

All Delta Electronics
High 8.8Sep 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78309fixed in 1.11.00.022Medium 4.3Sep 24Delta Electronics DIAEnergie: insecure direct object referenceCVE-2026-78310fixed in 1.11.00.022High 8.8Sep 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78311fixed in 1.11.00.022Critical 9.1Sep 24Delta Electronics DIAEnergie: path traversalCVE-2026-78312fixed in 1.11.00.022Medium 6.5Sep 24Delta Electronics DIAEnergie: improper access controlCVE-2026-78313fixed in 1.11.00.022High 8.8Aug 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78314no fix yet