Summary
| Parameter | Value |
|---|---|
| CVE ID | CVE-2026-1952 |
| Alert Source | GitHub Advisory - Critical Vulnerability |
| CVE Publication Year | 2026 |
| Date Published | 2026-04-24 |
| Vendor | Delta Electronics |
| Product | AS320T |
| CVSS Score | 9.8 (critical) |
| EPSS Score | No data |
| CISA KEV | No |
| Ransomware | Not confirmed |
Vulnerability Description
Delta Electronics AS320T has a denial-of-service vulnerability triggered via an undocumented subfunction of the communication protocol. A network-adjacent attacker can invoke this function to halt or disrupt the PLC in operational environments.
Required Actions
Update the Delta Electronics AS320T firmware to the patched version released by the vendor without delay. Until the patch is applied, restrict network access to the device to trusted OT segments only, enforce network segmentation according to the Purdue model, and monitor traffic for unusual requests targeting undocumented protocol subfunctions.
Who Is Affected?
This vulnerability affects AS320T by Delta Electronics. Check whether your organization uses this PLC in OT/industrial environments and schedule a firmware update immediately.
Sources
Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.
