AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Delta ElectronicsCVE-2026-78310

Delta Electronics DIAEnergie: insecure direct object reference

Delta Electronics

CVE-2026-78310 · Published Sep 24, 2026

Medium4.3
Fix: upgrade to 1.11.00.022 or later
Delta Electronics advisory

Authorization Bypass Through User-Controlled Key in DIAEnergie.

This issue affects DIAEnergie: before 1.11.00.022.

Affected versions

PackageAffectedFixed in
DIAEnergie
Product
< 1.11.00.0221.11.00.022
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-639

More Delta Electronics advisories

All Delta Electronics
Critical 9.8Sep 24Delta Electronics DIAEnergie: improper authenticationCVE-2026-78308fixed in 1.11.00.022High 8.8Sep 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78309fixed in 1.11.00.022High 8.8Sep 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78311fixed in 1.11.00.022Critical 9.1Sep 24Delta Electronics DIAEnergie: path traversalCVE-2026-78312fixed in 1.11.00.022Medium 6.5Sep 24Delta Electronics DIAEnergie: improper access controlCVE-2026-78313fixed in 1.11.00.022High 8.8Aug 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78314no fix yet