Delta Electronics DVP12SE PLC Modbus TCP Service Runs Without Authentication or Access Control, Granting Unauthenticated Network Access to Security-Sensitive PLC Functions

Last refreshed2026-09-28

Status: NEW | Advisory ID: CVE-2026-12819

Key Details

CVE	CVE-2026-12819
CVSS Score / Version	9.3 (Critical) / CVSS v4.0
Updated	2026-06-30
Classified as	CWE-306 (Missing Authentication for Critical Function)

What to Know

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions.

References

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-12819
CVE	https://www.cve.org/CVERecord?id=CVE-2026-12819

Source

Reference

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-12819

CVE

https://www.cve.org/CVERecord?id=CVE-2026-12819

Delta Electronics DVP12SE PLC Modbus TCP Service Runs Without Authentication or Access Control, Granting Unauthenticated Network Access to Security-Sensitive PLC Functions

Key Details

What to Know

References

About