Quick answers
- Is CVE-2026-12579 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-12579 being exploited in the wild.
- How severe is CVE-2026-12579?
- High severity, with a CVSS score of 7.4, published 1 July 2026.
- Which products and versions are affected?
- Delta Electronics AS228T up to and including 1.14.
- Is there a fix for CVE-2026-12579?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-12579 attacked?
- It is attacked over the network, in device firmware.
- Am I affected by CVE-2026-12579?
- Check whether you run Delta Electronics AS228T at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An authentication bypass vulnerability (CWE-288) exists in the Delta Electronics AS228T PLC firmware versions 1.14 and earlier. The flaw involves an alternate path or channel that allows an attacker to circumvent standard authentication mechanisms. While the attack vector is network-based and requires no prior privileges or user interaction, the complexity is rated as high, likely due to specific timing or environmental conditions required for successful exploitation. If successful, an attacker can achieve high impacts on system integrity and availability. Users are advised to refer to Delta Electronics advisory Delta-PCSA-2026-00012 for remediation steps.
Affected products
- Delta Electronics AS228T up to and including 1.14
Timeline
- 2026-07-01: advisory: Initial disclosure by Delta Electronics and NVD publication.