# CVE-2026-1952: Delta Electronics AS320T denial of service via undocumented subfunction

Source: https://junglewise.ai/threats/cve-2026-1952-delta-electronics-as320t-denial-of-service-via-undocumented  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-24. Updated: 2026-05-11  
License: CC BY 4.0 with a link back

CVE-2026-1952 · Severity: critical · CVSS 9.8 · Published 2026-04-24

The Delta Electronics AS320T, a programmable logic controller (PLC) used in industrial automation, contains a vulnerability involving undocumented hidden functionality. An attacker can exploit this to cause a denial of service, potentially halting industrial processes and disrupting operations. In some assessments, this flaw is also considered to pose a risk to data confidentiality and system integrity.

Technologies: [Deltaww As320t](https://junglewise.ai/threats/technologies/as320t), [Deltaww As320t Firmware](https://junglewise.ai/threats/technologies/as320t-firmware). Vendors: [Deltaww](https://junglewise.ai/threats/vendors/deltaww).

## Quick answers

**Is CVE-2026-1952 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-1952 being exploited in the wild.

**How severe is CVE-2026-1952?** Critical severity, with a CVSS score of 9.8, published 24 April 2026.

**Which products and versions are affected?** Delta Electronics AS320T firmware versions up to (excluding) 1.16.

**Is there a fix for CVE-2026-1952?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-1952 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-1952?** Check whether you run Deltaww As320t or Deltaww As320t Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The Delta Electronics AS320T PLC firmware (prior to version 1.16) contains hidden functionality (CWE-912) in the form of an undocumented subfunction. This vulnerability can be triggered over the network without authentication. While primarily reported as a denial of service (DoS) vector, vendor assessments suggest the flaw may also allow for unauthorized access to or modification of system data (C/I/A impact). Exploitation allows a remote attacker to disrupt the device's availability, effectively crashing the controller. Users are advised to update to firmware version 1.16 or later.

## Affected products

- Delta Electronics AS320T firmware versions up to (excluding) 1.16

## Timeline

- 2026-04-24: disclosed
- 2026-04-24: advisory: Vendor advisory Delta-PCSA-2026-00006 published

## References

- [https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00006_AS320T%20Multiple%20vulnerabilities%20(CVE-2026-1949,%201950,%201951,%201952).pdf](https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00006_AS320T%20Multiple%20vulnerabilities%20(CVE-2026-1949,%201950,%201951,%201952).pdf)

## Related threats

- [Delta Electronics AS320T stack-based buffer overflow in directory name processing](https://junglewise.ai/threats/cve-2026-1951-delta-electronics-as320t-stack-based-buffer-overflow-in-directory)
- [Delta Electronics AS320T stack overflow in file name handling](https://junglewise.ai/threats/cve-2026-1950-delta-electronics-as320t-stack-overflow-in-file-name-handling)
- [Delta Electronics AS320T stack buffer overflow in web service](https://junglewise.ai/threats/cve-2026-1949-delta-electronics-as320t-stack-buffer-overflow-in-web-service)