Path Traversal Vulnerability in DIAEnergie by Delta Electronics
CVE-2026-78312

9.1CRITICAL

Key Information:

Vendor

Deltaww

Status
Diaenergie
Vendor
CVE Published:
24 September 2026

What is CVE-2026-78312?

A path traversal vulnerability has been identified in DIAEnergie, a product by Delta Electronics. This flaw permits attackers to manipulate file paths, potentially allowing unauthorized access to sensitive files within the system. The vulnerability affects versions prior to 1.11.00.022, underscoring the importance of updating to mitigate associated security risks. Users are strongly advised to review their installations and implement the latest patches to secure their environments.

Affected Version(s)

DIAEnergie 0 < 1.11.00.022

References

https://filecenter.deltaww.com/news/download/doc/Delta-PC...

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alex Williams from Pellera Technologies
VulnCheck
.