# CVE-2026-1950: Delta Electronics AS320T stack overflow in file name handling

Source: https://junglewise.ai/threats/cve-2026-1950-delta-electronics-as320t-stack-overflow-in-file-name-handling  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-24. Updated: 2026-05-11  
License: CC BY 4.0 with a link back

CVE-2026-1950 · Severity: critical · CVSS 9.8 · Published 2026-04-24

The Delta Electronics AS320T, a programmable logic controller (PLC) used in industrial automation, contains a critical security flaw. An attacker can exploit this vulnerability by sending a specially crafted file name to the device, potentially allowing them to take full control of the controller. This could lead to unauthorized changes in industrial processes, equipment damage, or complete operational shutdowns.

Technologies: [Deltaww As320t](https://junglewise.ai/threats/technologies/as320t), [Deltaww As320t Firmware](https://junglewise.ai/threats/technologies/as320t-firmware). Vendors: [Deltaww](https://junglewise.ai/threats/vendors/deltaww).

## Quick answers

**Is CVE-2026-1950 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-1950 being exploited in the wild.

**How severe is CVE-2026-1950?** Critical severity, with a CVSS score of 9.8, published 24 April 2026.

**Which products and versions are affected?** Delta Electronics AS320T firmware up to (excluding) 1.16.

**Is there a fix for CVE-2026-1950?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-1950 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2026-1950?** Check whether you run Deltaww As320t or Deltaww As320t Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow (CWE-121) exists in the Delta Electronics AS320T PLC firmware. The vulnerability is caused by a failure to validate the length of input strings used for file names before copying them into a fixed-size stack buffer. A remote, unauthenticated attacker can exploit this over the network by providing an oversized file name string. Successful exploitation can lead to arbitrary code execution or a denial-of-service (DoS) condition. The issue is addressed in firmware version 1.16.

## Affected products

- Delta Electronics AS320T firmware up to (excluding) 1.16

## Timeline

- 2026-04-24: disclosed
- 2026-04-24: advisory

## References

- [https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00006_AS320T%20Multiple%20vulnerabilities%20(CVE-2026-1949,%201950,%201951,%201952).pdf](https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00006_AS320T%20Multiple%20vulnerabilities%20(CVE-2026-1949,%201950,%201951,%201952).pdf)

## Related threats

- [Delta Electronics AS320T denial of service via undocumented subfunction](https://junglewise.ai/threats/cve-2026-1952-delta-electronics-as320t-denial-of-service-via-undocumented)
- [Delta Electronics AS320T stack-based buffer overflow in directory name processing](https://junglewise.ai/threats/cve-2026-1951-delta-electronics-as320t-stack-based-buffer-overflow-in-directory)
- [Delta Electronics AS320T stack buffer overflow in web service](https://junglewise.ai/threats/cve-2026-1949-delta-electronics-as320t-stack-buffer-overflow-in-web-service)