Skip to content
OpenAdvisories
High · 7.8 CVE-2026-3094 EUVD-2026-9386GHSA-rvrc-3rxw-9j45

File Parsing Out-Of-Bounds Write in CNCSoft-G2

Published Mar 4, 2026 · Updated Mar 18, 2026 · Assigned by Deltaww

Description

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

Affected products

VendorProductAffectedFixed
deltaww CNCSoft-G2 < 2.1.0.39 2.1.0.39

Advisories 1

References