Critical Buffer Overflow Hits Delta Electronics AS320T

The National Vulnerability Database (NVD) has disclosed a critical buffer overflow vulnerability, CVE-2026-1950, affecting Delta Electronics AS320T devices. This flaw, rated with a CVSSv3.1 score of 9.8 (CRITICAL), stems from a lack of proper buffer length checking when handling filenames.

This is a textbook CWE-121 (Stack-based Buffer Overflow) scenario. An attacker could craft a malicious filename to overflow the buffer, leading to arbitrary code execution or a denial of service. The attack vector is network-based with low attack complexity and no privileges or user interaction required, making it extremely dangerous. The impact on confidentiality, integrity, and availability is rated as high.

For defenders, this means any exposed AS320T devices are prime targets. Given the nature of these systems, often found in industrial control environments, the implications are severe. Attackers are constantly looking for high-impact, low-effort vulnerabilities, and this fits the bill perfectly. Prioritize patching or isolation immediately.