CVE-2026-78308

Authentication Bypass in DIAEnergie

State: Published
Severity: 9.8 Critical
Published: Sep 24, 2026
Updated: Oct 15, 2026
Reserved: Aug 24, 2026

Description

Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass.

This issue affects DIAEnergie: before 1.11.00.022.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Deltaww

Weaknesses

CWE-287 Improper Authentication

Affected Products

Product	Versions
DIAEnergieDeltaww	before 1.11.00.022Affected

References

https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00014_DIAEnergie%20Multiple%20Vulberabilities%20(CVE-2026-78308%20~%2078313).pdf
https://pellera.com/blog/delta-electronics-diaenergie-unauthenticated-remote-code-execution-vulnerability-chain/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.