CVE-2026-9642
published 2026-05-26CVE-2026-9642: There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access) An unauthenticated remote attacker can access…
PriorityP263critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)
An unauthenticated remote attacker can access configured databases in a DIAView project.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| delta_electronics | diaview | — | — |
| deltaww | diaview | <= 4.4.0 | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvelistv5v3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4v2g-76qr-8gvj: There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)
An unauthenticated remote attacker can ac
ghsa_unreviewed·2026-05-26·CVSS 9.8
CVE-2026-9642 [CRITICAL] CWE-321 GHSA-4v2g-76qr-8gvj: There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)
An unauthenticated remote attacker can ac
There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)
An unauthenticated remote attacker can access configured databases in a DIAView project.
VulDB
Delta Electronics DIAView 4.4 hard-coded key (EUVD-2026-31970)
vuldb·2026-05-26·CVSS 9.8
CVE-2026-9642 [CRITICAL] Delta Electronics DIAView 4.4 hard-coded key (EUVD-2026-31970)
A vulnerability marked as very critical has been reported in Delta Electronics DIAView 4.4. Affected by this issue is some unknown functionality. Performing a manipulation results in use of hard-coded cryptographic key
.
This vulnerability is reported as CVE-2026-9642. The attack is possible to be carried out remotely. No exploit exists.
CVEList
Delta Electronics DIAView Patch Bypass
cvelistv5·2026-05-26·CVSS 9.8
CVE-2026-9642 [CRITICAL] CWE-321 Delta Electronics DIAView Patch Bypass
Delta Electronics DIAView Patch Bypass
There is a mitigation bypass / (incomplete fix) for CVE-2025-62582 (Unauthenticated Remote Database Access)
An unauthenticated remote attacker can access configured databases in a DIAView project.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-26
Published