LIVE FEED
Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider
CRITICAL CWE-306

CVE-2026-12819

DVP-12SE Missing Authentication and Unauthorized Write access Vulnerability

Delta Electronics·DVP-12SE

9.3/ 10
CVSS 4.0
Critical severity
0.54%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 46% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
Published
Jun 30, 2026
Updated
Jun 30, 2026
First covered
Jul 3, 2026
Latest story
4 months ago

Summary

Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions.

CWE-306Missing Authentication for Critical Function

Attack profile

Attack vectorNetwork
ComplexityLow
RequirementsNone
PrivilegesNone
User interactionNone
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

  • Delta Electronics DVP-12SE

References

CVE.org recordcve.org NVD entrynvd.nist.gov Advisoryfilecenter.deltaww.com
Daily at 7:00 AM Eastern

The 0700 Brief

Every new security and AI story, summarised in one email. Confirm by email, unsubscribe in one click.

43 readers have subscribed