delta-electronicsCVE-2026-78310

Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

Medium4.3CVE-2026-78310 · Published Sep 24, 2026

Source advisory

Affected versions

Package	Affected	Fixed in
DIAEnergie Vendor	< 1.11.00.022	1.11.00.022

Details and references

Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Severity from: no source yet
Weakness: CWE-639

More delta-electronics advisories

Date	Advisory	Severity	Fixed in
Sep 24	Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022. CVE-2026-78308Critical9.8fixed in DIAEnergie 1.11.00.022	Critical9.8	DIAEnergie 1.11.00.022
Sep 24	SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. CVE-2026-78309High8.8fixed in DIAEnergie 1.11.00.022	High8.8	DIAEnergie 1.11.00.022
Sep 24	SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. CVE-2026-78311High8.8fixed in DIAEnergie 1.11.00.022	High8.8	DIAEnergie 1.11.00.022
Sep 24	Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. CVE-2026-78312Critical9.1fixed in DIAEnergie 1.11.00.022	Critical9.1	DIAEnergie 1.11.00.022
Sep 24	Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. CVE-2026-78313Medium6.5fixed in DIAEnergie 1.11.00.022	Medium6.5	DIAEnergie 1.11.00.022
Aug 24	SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. CVE-2026-78314High8.8no fix yet	High8.8	No fix yet

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.