CVE-2026-105227 - Vulnerability Details - OpenCVE

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction Active

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Deltaww

ISPSoft

unaffected

Version	Status	Constraints
`0`	affected	< 3.25

No data.

No data.

No data.

Project Subscriptions

Vendors	Products
Deltaww Subscribe	Ispsoft Subscribe

Advisories

No advisories yet.

Fixes

Solution

 Please download and upgrade ISPSoft to v3.25 or later.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00016_ISPSoft%20Out-of-Bounds%20Read%20Vulnerability.pdf

History

Fri, 16 Oct 2026 01:45:00 +0000

Type	Values Removed	Values Added
Description		This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.
Title		ISPSoft Out-of-Bounds Read Vulnerability
First Time appeared		Deltaww Deltaww ispsoft
Weaknesses		CWE-125
CPEs		cpe:2.3:a:deltaww:ispsoft::::::::
Vendors & Products		Deltaww Deltaww ispsoft
References		https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00016_ISPSoft%20Out-of-Bounds%20Read%20Vulnerability.pdf
Metrics		cvssV4_0 `{'score': 7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Deltaww

Published: 2026-10-16T01:27:28.267Z

Updated: 2026-10-16T06:48:17.359Z

Reserved: 2026-10-04T13:57:56.016Z

Link: CVE-2026-105227

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-10-16T03:17:58.357

Modified: 2026-10-16T03:17:58.357

Link: CVE-2026-105227

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-125

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-105227", "assignerOrgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "state": "PUBLISHED", "assignerShortName": "Deltaww", "dateReserved": "2026-10-04T13:57:56.016Z", "datePublished": "2026-10-16T01:27:28.267Z", "dateUpdated": "2026-10-16T06:48:17.359Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "759f5e80-c8e1-4224-bead-956d7b33c98b", "shortName": "Deltaww", "dateUpdated": "2026-10-16T06:48:17.359Z"}, "title": "ISPSoft Out-of-Bounds Read Vulnerability", "datePublic": "2026-10-16T01:18:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds read", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-540", "descriptions": [{"lang": "en", "value": "CAPEC-540 Overread Buffers"}]}], "affected": [{"vendor": "Deltaww", "product": "ISPSoft", "versions": [{"status": "affected", "version": "0", "lessThan": "3.25", "versionType": "custom"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:deltaww:ispsoft:*:*:*:*:*:*:*:*", "versionStartIncluding": "0", "versionEndExcluding": "3.25"}]}]}], "descriptions": [{"lang": "en", "value": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft."}]}], "references": [{"url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00016_ISPSoft%20Out-of-Bounds%20Read%20Vulnerability.pdf"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "LOW", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N"}}], "solutions": [{"lang": "en", "value": "\uf0d8\tPlease download and upgrade ISPSoft to v3.25 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "\uf0d8\tPlease download and upgrade ISPSoft to v3.25 or later."}]}], "credits": [{"lang": "en", "value": "Nanjing YunShangHuaAn Technology Co., Ltd. (\u5357\u4eac\u4e91\u4e0a\u534e\u5b89\u79d1\u6280\u6709\u9650\u516c\u53f8)", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "ISPSoft", "vendor": "Deltaww", "versions": [{"lessThan": "3.25", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "759f5e80-c8e1-4224-bead-956d7b33c98b"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft."}], "id": "CVE-2026-105227", "lastModified": "2026-10-16T03:17:58.357", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "759f5e80-c8e1-4224-bead-956d7b33c98b", "type": "Secondary"}]}, "published": "2026-10-16T03:17:58.357", "references": [{"source": "759f5e80-c8e1-4224-bead-956d7b33c98b", "url": "https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00016_ISPSoft%20Out-of-Bounds%20Read%20Vulnerability.pdf"}], "sourceIdentifier": "759f5e80-c8e1-4224-bead-956d7b33c98b", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "759f5e80-c8e1-4224-bead-956d7b33c98b", "type": "Secondary"}]}