AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Delta ElectronicsCVE-2026-78312

Delta Electronics DIAEnergie: path traversal

Delta Electronics

CVE-2026-78312 · Published Sep 24, 2026

Critical9.1
Fix: upgrade to 1.11.00.022 or later
Delta Electronics advisory

Path Traversal in DIAEnergie.

This issue affects DIAEnergie: before 1.11.00.022.

Affected versions

PackageAffectedFixed in
DIAEnergie
Product
< 1.11.00.0221.11.00.022
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-22

More Delta Electronics advisories

All Delta Electronics
Critical 9.8Sep 24Delta Electronics DIAEnergie: improper authenticationCVE-2026-78308fixed in 1.11.00.022High 8.8Sep 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78309fixed in 1.11.00.022Medium 4.3Sep 24Delta Electronics DIAEnergie: insecure direct object referenceCVE-2026-78310fixed in 1.11.00.022High 8.8Sep 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78311fixed in 1.11.00.022Medium 6.5Sep 24Delta Electronics DIAEnergie: improper access controlCVE-2026-78313fixed in 1.11.00.022High 8.8Aug 24Delta Electronics DIAEnergie: SQL injectionCVE-2026-78314no fix yet