What’s Vulnerable › Vulnerabilities

CVE-2026-12578: DTMSoft - Deserialization of Untrusted Data Vulnerability

• Severity: high (CVSS 8.4 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-30 · updated 2026-10-25
• Weakness: CWE-502

Description

The affected product is vulnerable to a deserialization of untrusted data, which may allow an attacker to execute arbitrary code.

Affected products

• deltaww DTMSoft: all versions

References

• https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00010_DTMSoft%20Project%20File%20Parsing%20Deserialization%20of%20Untrusted%20Data%20Remote%20Code%20(CVE-2026-12578)_v1.0.pdf

Get alerted when CVE-2026-12578 or the next vulnerability affects your stack