# CVE-2026-12576: Delta Electronics DVP80ES3 improper message integrity enforcement

Source: https://junglewise.ai/threats/cve-2026-12576-delta-electronics-dvp80es3-improper-message-integrity-enforcement  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-01. Updated: 2026-07-01  
License: CC BY 4.0 with a link back

CVE-2026-12576 · Severity: high · CVSS 7.5 · Published 2026-07-01

Delta Electronics DVP80ES3 series programmable logic controllers (PLCs), which are used to automate industrial machinery and processes, are vulnerable to a communication flaw. An attacker can exploit this issue to disrupt the device's operations, potentially leading to a complete loss of availability for the industrial equipment it controls. This could result in production downtime or the inability to manage critical infrastructure remotely.

Technologies: [Delta Electronics DVP80ES3](https://junglewise.ai/threats/technologies/dvp80es3). Vendors: [Delta Electronics](https://junglewise.ai/threats/vendors/delta-electronics).

## Quick answers

**Is CVE-2026-12576 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-12576 being exploited in the wild.

**How severe is CVE-2026-12576?** High severity, with a CVSS score of 7.5, published 1 July 2026.

**Which products and versions are affected?** Delta Electronics DVP80ES3 <= 1.06.00.

**Is there a fix for CVE-2026-12576?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-12576 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2026-12576?** Check whether you run Delta Electronics DVP80ES3 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Delta Electronics DVP80ES3 PLC firmware (up to version 1.06.00) contains a vulnerability classified as CWE-924, involving the improper enforcement of message integrity during transmission. This flaw exists within the communication channel used by the device. A remote, unauthenticated attacker can exploit this weakness over the network without any user interaction. Successful exploitation primarily impacts the availability of the device, potentially allowing an attacker to cause a denial-of-service (DoS) condition. Users are advised to refer to Delta Electronics advisory Delta-PCSA-2026-00009 for remediation steps.

## Affected products

- Delta Electronics DVP80ES3 <= 1.06.00

## Timeline

- 2026-07-01: advisory: Initial publication of CVE-2026-12576 by Delta Electronics and NVD.

## References

- [https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00009_DVP80ES3%20Multiple%20Vulnerabilities_v1%20(CVE-2026-12575,%2012576,%2012577).pdf](https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00009_DVP80ES3%20Multiple%20Vulnerabilities_v1%20(CVE-2026-12575,%2012576,%2012577).pdf)

## Related threats

- [Delta Electronics DVP80ES3 improperly implemented security check](https://junglewise.ai/threats/cve-2026-12577-delta-electronics-dvp80es3-improperly-implemented-security-check)
- [Delta Electronics DVP80ES3 improper resource shutdown or release](https://junglewise.ai/threats/cve-2026-12575-delta-electronics-dvp80es3-improper-resource-shutdown-or-release)