Delta Electronics
Vulnerability activity for Delta Electronics: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
Recent
- 5.3MediumOct 30, 2026Delta UFC500CVE-2026-22114HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible.
- 8.7HighOct 30, 2026Delta UFC500 Auth bypass / access controlCVE-2026-22110The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting.
- 8.4HighOct 30, 2026Delta UFC500CVE-2026-22109The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit.
- 8.7HighOct 30, 2026Delta UFC500CVE-2026-22105Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct the resulting password, or exhaust the keyspace, and log in to read and change sensitive settings such as the OCPP backend.
- 7.8HighSep 17, 2021Delta Electronics DOPSoft 2 Memory corruptionCVE-2021-38406Delta Electronics DOPSoft 2 lacks proper validation of user-supplied data when parsing specific project files (improper input validation) resulting in an out-of-bounds write that allows for code execution.Exploited76% likely
Top products
- Delta UFC5004 CVEs in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.