Quick answers
- Is CVE-2026-1952 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-1952 being exploited in the wild.
- How severe is CVE-2026-1952?
- Critical severity, with a CVSS score of 9.8, published 24 April 2026.
- Which products and versions are affected?
- Delta Electronics AS320T firmware versions up to (excluding) 1.16.
- Is there a fix for CVE-2026-1952?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-1952 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2026-1952?
- Check whether you run Deltaww As320t or Deltaww As320t Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The Delta Electronics AS320T PLC firmware (prior to version 1.16) contains hidden functionality (CWE-912) in the form of an undocumented subfunction. This vulnerability can be triggered over the network without authentication. While primarily reported as a denial of service (DoS) vector, vendor assessments suggest the flaw may also allow for unauthorized access to or modification of system data (C/I/A impact). Exploitation allows a remote attacker to disrupt the device's availability, effectively crashing the controller. Users are advised to update to firmware version 1.16 or later.
Affected products
- Delta Electronics AS320T firmware versions up to (excluding) 1.16
Timeline
- 2026-04-24: disclosed
- 2026-04-24: advisory: Vendor advisory Delta-PCSA-2026-00006 published