# CVE-2026-1949: Delta Electronics AS320T stack buffer overflow in web service

Source: https://junglewise.ai/threats/cve-2026-1949-delta-electronics-as320t-stack-buffer-overflow-in-web-service  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-24. Updated: 2026-05-11  
License: CC BY 4.0 with a link back

CVE-2026-1949 · Severity: critical · CVSS 9.8 · Published 2026-04-24

A critical vulnerability exists in the Delta Electronics AS320T, a programmable logic controller (PLC) used in industrial automation. An attacker can remotely exploit a flaw in the device's web management interface to gain full control over the system. This could lead to unauthorized access to industrial processes, data theft, or a complete shutdown of operations.

Technologies: [Deltaww As320t](https://junglewise.ai/threats/technologies/as320t), [Deltaww As320t Firmware](https://junglewise.ai/threats/technologies/as320t-firmware). Vendors: [Deltaww](https://junglewise.ai/threats/vendors/deltaww).

## Quick answers

**Is CVE-2026-1949 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-1949 being exploited in the wild.

**How severe is CVE-2026-1949?** Critical severity, with a CVSS score of 9.8, published 24 April 2026.

**Which products and versions are affected?** Delta Electronics AS320T firmware up to (excluding) 1.16.

**Is there a fix for CVE-2026-1949?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-1949 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-1949?** Check whether you run Deltaww As320t or Deltaww As320t Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow vulnerability (CWE-131) exists in the web service component of Delta Electronics AS320T devices. The flaw is located within the GET/PUT request handler, where the application incorrectly calculates buffer sizes on the stack. A remote, unauthenticated attacker can exploit this by sending specially crafted HTTP requests over the network. Successful exploitation can lead to arbitrary code execution with high privileges, potentially resulting in a full system compromise. The vulnerability is addressed in firmware version 1.16.

## Affected products

- Delta Electronics AS320T firmware up to (excluding) 1.16

## Timeline

- 2026-04-24: disclosed
- 2026-04-24: advisory: Vendor advisory Delta-PCSA-2026-00006 released

## References

- [https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00006_AS320T%20Multiple%20vulnerabilities%20(CVE-2026-1949,%201950,%201951,%201952).pdf](https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00006_AS320T%20Multiple%20vulnerabilities%20(CVE-2026-1949,%201950,%201951,%201952).pdf)

## Related threats

- [Delta Electronics AS320T denial of service via undocumented subfunction](https://junglewise.ai/threats/cve-2026-1952-delta-electronics-as320t-denial-of-service-via-undocumented)
- [Delta Electronics AS320T stack-based buffer overflow in directory name processing](https://junglewise.ai/threats/cve-2026-1951-delta-electronics-as320t-stack-based-buffer-overflow-in-directory)
- [Delta Electronics AS320T stack overflow in file name handling](https://junglewise.ai/threats/cve-2026-1950-delta-electronics-as320t-stack-overflow-in-file-name-handling)