Is CVE-2026-12576 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-12576 being exploited in the wild.

How severe is CVE-2026-12576?

High severity, with a CVSS score of 7.5, published 1 July 2026.

Which products and versions are affected?

Delta Electronics DVP80ES3 <= 1.06.00.

Is there a fix for CVE-2026-12576?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-12576 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2026-12576?

Check whether you run Delta Electronics DVP80ES3 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-12576: Delta Electronics DVP80ES3 improper message integrity enforcement

Q: Is there a fix for CVE-2026-12576?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2026-12576 attacked?

It is attacked over the network, in an operating system.

Q: Am I affected by CVE-2026-12576?

Check whether you run Delta Electronics DVP80ES3 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-12576 · Severity: high · CVSS 7.5 · Published 2026-07-01

Delta Electronics DVP80ES3 series programmable logic controllers (PLCs), which are used to automate industrial machinery and processes, are vulnerable to a communication flaw. An attacker can exploit this issue to disrupt the device's operations, potentially leading to a complete loss of availability for the industrial equipment it controls. This could result in production downtime or the inability to manage critical infrastructure remotely.

Technologies: Delta Electronics DVP80ES3. Vendors: Delta Electronics.

Quick answers

Is CVE-2026-12576 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-12576 being exploited in the wild.
How severe is CVE-2026-12576?: High severity, with a CVSS score of 7.5, published 1 July 2026.
Which products and versions are affected?: Delta Electronics DVP80ES3 <= 1.06.00.
Is there a fix for CVE-2026-12576?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-12576 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2026-12576?: Check whether you run Delta Electronics DVP80ES3 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Delta Electronics DVP80ES3 PLC firmware (up to version 1.06.00) contains a vulnerability classified as CWE-924, involving the improper enforcement of message integrity during transmission. This flaw exists within the communication channel used by the device. A remote, unauthenticated attacker can exploit this weakness over the network without any user interaction. Successful exploitation primarily impacts the availability of the device, potentially allowing an attacker to cause a denial-of-service (DoS) condition. Users are advised to refer to Delta Electronics advisory Delta-PCSA-2026-00009 for remediation steps.

Affected products

Delta Electronics DVP80ES3 <= 1.06.00

Timeline

2026-07-01: advisory: Initial publication of CVE-2026-12576 by Delta Electronics and NVD.

References

https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00009_DVP80ES3%20Multiple%20Vulnerabilities_v1%20(CVE-2026-12575,%2012576,%2012577).pdf

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.