High severity · published Oct 16, 2026
CVE-2026-105228
ISPSoft Out-of-Bounds Read Vulnerability
7.0
CVSS
0.3%
EPSS
No
On KEV
Description
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IS
ISPSoft · Deltaww
before 3.25 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-105228
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-105228
filecenter.deltaww.com
https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00016_ISPSoft%20Out-of-Bounds%20Read%20Vulnerability.pdf
More from ISPSoft
9.8
CVE-2025-4125
ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
9.8
CVE-2025-4124
ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
9.8
CVE-2025-22884
ISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
9.8
CVE-2025-22883
ISPSoft File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
9.8
CVE-2025-22882
ISPSoft File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
