# CVE-2026-5726: Delta Electronics ASDA-Soft stack-based buffer overflow

Source: https://junglewise.ai/threats/cve-2026-5726-delta-electronics-asda-soft-stack-based-buffer-overflow  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-08. Updated: 2026-07-24  
License: CC BY 4.0 with a link back

CVE-2026-5726 · Severity: high · CVSS 7.8 · Published 2026-04-08

Delta Electronics ASDA-Soft, a configuration tool used for industrial servo drives, is vulnerable to a memory corruption flaw. An attacker could exploit this by tricking a user into opening a specially crafted file, potentially leading to a complete system takeover or service disruption. This could impact industrial operations by allowing unauthorized changes to motor drive configurations or disabling the management software.

Technologies: [Deltaww Asda Soft](https://junglewise.ai/threats/technologies/asda-soft). Vendors: [Deltaww](https://junglewise.ai/threats/vendors/deltaww).

## Quick answers

**Is CVE-2026-5726 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-5726 being exploited in the wild.

**How severe is CVE-2026-5726?** High severity, with a CVSS score of 7.8, published 8 April 2026.

**Which products and versions are affected?** Delta Electronics (DeltaWW) ASDA-Soft <= 7.2.2.0.

**Is there a fix for CVE-2026-5726?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-5726 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-5726?** Check whether you run Deltaww Asda Soft. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow (CWE-121) exists in Delta Electronics ASDA-Soft versions 7.2.2.0 and prior. The vulnerability is triggered when the application processes a malformed file or input, leading to an out-of-bounds write (CWE-787) on the stack. While the attack vector is local, it requires user interaction (UI:R), such as opening a malicious project file. Successful exploitation can result in arbitrary code execution with the privileges of the application or a complete application crash. Users are advised to update to version 7.2.6.0 or later to mitigate this risk.

## Affected products

- Delta Electronics (DeltaWW) ASDA-Soft <= 7.2.2.0

## Timeline

- 2026-04-07: disclosed
- 2026-04-08: advisory

## References

- [https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00007_ASDA-Soft%20Stack-based%20Buffer%20Overflow%20Vulnerability%20(CVE-2026-5726).pdf](https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00007_ASDA-Soft%20Stack-based%20Buffer%20Overflow%20Vulnerability%20(CVE-2026-5726).pdf)

## Related threats

- [ASDA-Soft Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2025-62580-asda-soft-stack-based-buffer-overflow-vulnerability)
- [ASDA-Soft Stack-based Buffer Overflow Vulnerability](https://junglewise.ai/threats/cve-2025-62579-asda-soft-stack-based-buffer-overflow-vulnerability)