ZDI-CAN-27843: ZDI-26-404: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

Published Jul 15, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DTM Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-12578.

Affected Software

1 affected component

Delta Electronics DTM Soft

Event History

Jul 15, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-27843?

The severity of ZDI-CAN-27843 is rated as 7.8 on the CVSS scale.

How do I fix ZDI-CAN-27843?

To fix ZDI-CAN-27843, ensure that you apply the latest security updates provided by Delta Electronics for the DTM Soft software.

What type of attack is associated with ZDI-CAN-27843?

ZDI-CAN-27843 is associated with remote code execution attacks that require user interaction.

What software is affected by ZDI-CAN-27843?

ZDI-CAN-27843 affects the Delta Electronics DTM Soft software.

What is the nature of the vulnerability in ZDI-CAN-27843?

The vulnerability in ZDI-CAN-27843 involves deserialization of untrusted data.