Is CVE-2026-1951 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-1951 being exploited in the wild.

How severe is CVE-2026-1951?

Critical severity, with a CVSS score of 9.8, published 24 April 2026.

Which products and versions are affected?

Delta Electronics AS320T firmware versions up to (excluding) 1.12.

Is there a fix for CVE-2026-1951?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-1951 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-1951?

Check whether you run Deltaww As320t or Deltaww As320t Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-1951: Delta Electronics AS320T stack-based buffer overflow in directory name processing

CVE-2026-1951 · Severity: critical · CVSS 9.8 · Published 2026-04-24

A critical security vulnerability exists in Delta Electronics AS320T programmable logic controllers (PLCs), which are used in industrial automation. An attacker can remotely exploit this flaw to gain full control over the device, potentially leading to unauthorized process changes, data theft, or complete operational shutdown. This issue is caused by the device failing to properly limit the size of directory names it processes.

Technologies: Deltaww As320t, Deltaww As320t Firmware. Vendors: Deltaww.

Quick answers

Is CVE-2026-1951 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-1951 being exploited in the wild.
How severe is CVE-2026-1951?: Critical severity, with a CVSS score of 9.8, published 24 April 2026.
Which products and versions are affected?: Delta Electronics AS320T firmware versions up to (excluding) 1.12.
Is there a fix for CVE-2026-1951?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-1951 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-1951?: Check whether you run Deltaww As320t or Deltaww As320t Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow (CWE-121) exists in the Delta Electronics AS320T PLC firmware. The vulnerability is caused by a lack of bounds checking when processing directory names, allowing a buffer to be overwritten if a specially crafted, overly long string is provided. This can be exploited over the network without any user interaction or prior authentication. Successful exploitation could lead to remote code execution (RCE) or a complete system crash (DoS). The issue is addressed in firmware version 1.12.

Affected products

Delta Electronics AS320T firmware versions up to (excluding) 1.12

Timeline

2026-04-24: disclosed
2026-04-24: advisory
2026-05-11: other: NVD initial analysis completed

References

https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00006_AS320T%20Multiple%20vulnerabilities%20(CVE-2026-1949,%201950,%201951,%201952).pdf

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.