delta-electronicsCVE-2026-78312

Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

Critical9.1CVE-2026-78312 · Published Sep 24, 2026

Source advisory

Affected versions

Package	Affected	Fixed in
DIAEnergie Vendor	< 1.11.00.022	1.11.00.022

Details and references

Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Severity from: no source yet
Weakness: CWE-22

More delta-electronics advisories

Date	Advisory	Severity	Fixed in
Sep 24	Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022. CVE-2026-78308Critical9.8fixed in DIAEnergie 1.11.00.022	Critical9.8	DIAEnergie 1.11.00.022
Sep 24	SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. CVE-2026-78309High8.8fixed in DIAEnergie 1.11.00.022	High8.8	DIAEnergie 1.11.00.022
Sep 24	Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. CVE-2026-78310Medium4.3fixed in DIAEnergie 1.11.00.022	Medium4.3	DIAEnergie 1.11.00.022
Sep 24	SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. CVE-2026-78311High8.8fixed in DIAEnergie 1.11.00.022	High8.8	DIAEnergie 1.11.00.022
Sep 24	Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. CVE-2026-78313Medium6.5fixed in DIAEnergie 1.11.00.022	Medium6.5	DIAEnergie 1.11.00.022
Aug 24	SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. CVE-2026-78314High8.8no fix yet	High8.8	No fix yet

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.