---
id: CVE-2026-105228
title: >-
  This vulnerability allows remote attackers to disclose sensitive information
  on affected installations of Delta ISPSoft.
summary: >-
  This vulnerability allows remote attackers to disclose sensitive information
  on affected installations of Delta ISPSoft.
severity: high
cvss: 7
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N'
cwe:
  - CWE-125
vendor: Deltaww
product: ISPSoft
affected:
  - ISPSoft < 3.25
published: '2026-10-16'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T17:17:23.103'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-105228'
references:
  - url: >-
      https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00016_ISPSoft%20Out-of-Bounds%20Read%20Vulnerability.pdf
    label: 759f5e80-c8e1-4224-bead-956d7b33c98b
tags:
  - nvd
  - cve.org
epss: 0.00308
epssPercentile: 0.23448
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-16T16:21:56.439536Z'
cvssSource: cna
ingestedAt: '2026-10-16T01:55:57.988Z'
---

## Overview

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.