Delta Electronics has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 8.6 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.6
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Weakness classes
Products
- msi-image 4
Worst active — by depth score
Delta Electronics vulnerabilities
CVEs affecting Delta Electronics, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-22110High· 8.7Missing authentication check on POST/PUT requests
The web server does not check authentication on POST or PUT. An unauthenticated attacker can reboot the charger; by brute-forcing the configid, they can also set the service password and then change any setting.
CVE-2026-22109High· 8.4Default WebUI passwords stored in plaintext
The shipped WebUI template database retains the factory default passwords for all five account types in cleartext. Defaults are identical across devices and were unchanged on the tested unit.
CVE-2026-22105High· 8.7Use of default password based on serial number
Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the device serial number. An unauthenticated attacker with adjacent network access can reconstruct the resulting password, o…
CVE-2026-22114Medium· 5.3Missing brute-force protection for web interface
HTTP basic auth enforces no retry limit or backoff. Combined with the default service password, the keyspace is exhaustible.