Not scored
CVE-2026-3094
File Parsing Out-Of-Bounds Write in CNCSoft-G2
deltawwCNCSoft-G2
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 30% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.
Coverage 1 article · 1 outlet
- Delta CNCSoft G2 CVE-2026-3094 could enable remote code executionCISA · first in our coverage · official notice