Deltaww Ispsoft vulnerabilities

10 CVEs affecting Deltaww Ispsoft, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-105228, published 2026-10-16.

More from Deltaww.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-14800, published 2018-10-03. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. Delta Electronics ISPSoft version 3.0.5 and prior allow an attacker, by opening a crafted file, to cause the application to read past the boundary allocated to a stack object, which could allow…
• CVE-2020-27280, published 2021-01-26. High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days. A use after free issue has been identified in the way ISPSoft(v3.12 and prior) processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution.
• CVE-2023-5131, published 2024-01-18. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution.
• CVE-2025-22882, published 2025-04-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to execute arbitrary code when parsing…
• CVE-2025-22884, published 2025-04-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file.
• CVE-2025-22883, published 2025-04-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file.
• CVE-2025-4125, published 2025-04-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.
• CVE-2025-4124, published 2025-04-30. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitrary code when parsing ISP file.
• CVE-2026-105228, published 2026-10-16. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.
• CVE-2026-105227, published 2026-10-16. High severity, CVSS 7.0. EPSS: 0.3% chance of exploitation in the next 30 days. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.