Skip to content
OpenAdvisories
Critical ICSA-26-181-07 2 CVEs

Delta Electronics DVP12SE PLC

Published Jun 30, 2026 · Updated Jun 30, 2026

Vendor: Delta Electronics Product: DVP12SE PLC

Summary

Successful exploitation of these vulnerabilities could allow an attacker to remotely issue commands, modify operational values, interfere with control logic, and alter device behavior without authentication or privilege enforcement.

Vulnerabilities 2

  • Critical 9.3
    CVE-2026-12818

    DVP-12SE Exposure of Sensitive Information Vulnerability

    Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service.

    Deltaww DVP-12SE
  • Critical 9.3
    CVE-2026-12819

    DVP-12SE Missing Authentication and Unauthorized Write access Vulnerability

    Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions.

    Deltaww DVP-12SE

Revision history

  1. #1

    Initial Publication

References