PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-105228 Deltaww CVE debrief

This debrief provides an overview of CVE-2026-105228, a high-severity vulnerability affecting Delta ISPSoft. The vulnerability allows remote attackers to disclose sensitive information. According to the CVE Program and NVD, the vulnerability has a CVSS score of 7 and is classified as HIGH. The CVE Program and NVD provide official records, but details on affected versions and remediation are limited. Defenders and security teams should assess potential exposure and impacts on systems using Delta ISPSoft, especially those with internet-exposed interfaces. The vulnerability's high severity indicates potential significant impacts, and defenders should prioritize verifying exposure and

Vendor
Deltaww
Product
ISPSoft
CVSS
HIGH 7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-16
Original CVE updated
2026-10-16
Advisory published
2026-10-16
Advisory updated
2026-10-16

Who should care

Defenders and security teams responsible for systems using Delta ISPSoft, especially those with internet-exposed interfaces, should assess potential exposure and impacts.

Why it matters

CVE-2026-105228 is a high-severity vulnerability in Delta ISPSoft that allows remote attackers to disclose sensitive information. Defenders should prioritize verifying exposure and assessing potential impacts on systems using Delta ISPSoft, especially those with internet-exposed interfaces. The CVE Program and NVD provide official records, but details on affected versions and remediation are limited.

  • Verify exposure of Delta ISPSoft installations to remote information disclosure.
  • Assess potential impacts on systems using Delta ISPSoft.
  • Implement compensating controls to mitigate potential risks.

Technical summary

CVE-2026-105228 is a high-severity vulnerability in Delta ISPSoft that allows remote attackers to disclose sensitive information. The vulnerability has a CVSS score of 7 and is classified as HIGH. The CVE Program and NVD provide official records, but details on affected versions and remediation are limited.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impacts on systems using Delta ISPSoft, especially those with internet-exposed interfaces.

Recommended defensive actions

  • Verify exposure of Delta ISPSoft installations, especially those with internet-exposed interfaces.
  • Assess potential impacts on systems using Delta ISPSoft.
  • Review and implement compensating controls to mitigate potential risks.

Evidence notes

The CVE Program and NVD provide official records of the vulnerability, but details on affected versions and remediation are limited. A source reference from Delta provides additional information.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-105228 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-105228

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-105228 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-105228

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source reference

    Unverified legacy reference

    URL: https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00016_ISPSoft%20Out-of-Bounds%20Read%20Vulnerability.pdf

    759f5e80-c8e1-4224-bead-956d7b33c98b

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.