What’s Vulnerable › Vulnerabilities

CVE-2026-1949: Incorrect calculation of buffer size on the stack in AS320T

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-24 · updated 2026-10-26
• Weakness: CWE-131

Description

Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service.

Affected products

• DeltaWW AS320T: before 1.16 — fixed in 1.16

How to fix

Upgrade to a fixed version: DeltaWW AS320T 1.16. Check the vendor advisory for mitigations.

References

• https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00006_AS320T%20Multiple%20vulnerabilities%20(CVE-2026-1949,%201950,%201951,%201952).pdf

Get alerted when CVE-2026-1949 or the next vulnerability affects your stack