Delta Electronics CNCSoft-G2
Delta Electronics CNCSoft-G2 devices prior to version V2.1.0.39 contain an out-of-bounds write vulnerability (CVE-2026-3094) in the DOPSoft component while parsing DPAX files, with a CVSS score of 7.8 that could allow remote code execution. The vulnerability affects critical manufacturing infrastructure worldwide, and Delta Electronics recommends immediate patching to version 2.1.0.39 or later.
Summary
Delta Electronics CNCSoft-G2 devices prior to version V2.1.0.39 contain an out-of-bounds write vulnerability (CVE-2026-3094) in the DOPSoft component while parsing DPAX files, with a CVSS score of 7.8 that could allow remote code execution. The vulnerability affects critical manufacturing infrastructure worldwide, and Delta Electronics recommends immediate patching to version 2.1.0.39 or later.
Indicators of Compromise
- cve — CVE-2026-3094