How do I check whether I am affected by CVE-2026-105227?

In ISPSoft, open Help > About and read the version. Anything below 3.25 is affected.

What is the fix for CVE-2026-105227?

Upgrade ISPSoft to v3.25 or later from the Delta Download Center. Delta lists no workaround.

Who is not affected by CVE-2026-105227?

Not affected if: ispsoft-3.25-or-later.

Live › vulnerability › CVE-2026-105227

Go to dashboard

high7.0Infrastructure

Delta ISPSoft: remote attackers can disclose sensitive information

Out-of-bounds read (CWE-125) in Delta ISPSoft, the PLC programming software, before v3.25. Delta's advisory says to upgrade to v3.25 or later; there is no workaround. The CVSS vector requires user interaction, so the likely trigger is opening a crafted project file.

Summary written from the sources below. Check the originals before acting.

CVSS 4.0

7.0

high

scored by 759f5e80-c8e1-4224-bead-956d7b33c98b

known so far5 of 6

missing: exploitation

First public: Oct 16, 2026 UTC
Last modified: Oct 25, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: Not known from the sources.
Needs a special setup: Not known from the sources.
Reachable from: internet.
Worst case: Sensitive information disclosed to remote attackers; exact data unknown.
CVSS said: 7.0. The facts above say medium; we keep the sources' high until an analyst looks.

Who is affected

1 product

Know the next one before it finds you.

Add to Slack

Live › vulnerability › CVE-2026-105227

Go to dashboard

high7.0Infrastructure

Delta ISPSoft: remote attackers can disclose sensitive information

Summary written from the sources below. Check the originals before acting.

CVSS 4.0

7.0

high

scored by 759f5e80-c8e1-4224-bead-956d7b33c98b

known so far5 of 6

missing: exploitation

First public: Oct 16, 2026 UTC
Last modified: Oct 25, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: Not known from the sources.
Needs a special setup: Not known from the sources.
Reachable from: internet.
Worst case: Sensitive information disclosed to remote attackers; exact data unknown.
CVSS said: 7.0. The facts above say medium; we keep the sources' high until an analyst looks.

Who is affected

1 product

Know the next one before it finds you.

Add to Slack

Delta ISPSoft: remote attackers can disclose sensitive information

Why it is high, and not just CVSS

Who is affected

Know the next one before it finds you.

Delta ISPSoft: remote attackers can disclose sensitive information

Why it is high, and not just CVSS

Who is affected

Know the next one before it finds you.

How to check

The fix

Who had it, and when

What the sources say, verbatim

Sources