ZDI-CAN-28685: ZDI-26-211: Delta Electronics ASDA-Soft PAR File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

Published Mar 16, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics ASDA-Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-1361.

Affected Software

1 affected component

Delta Electronics ASDA-Soft

Event History

Mar 16, 2026

Advisory Published

via ZDI·05:00 AM

Data Sourced

via ZDI·05:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-28685?

ZDI-CAN-28685 has a CVSS rating of 7.8, indicating a high severity level.

How do I fix ZDI-CAN-28685?

To fix ZDI-CAN-28685, users should update Delta Electronics ASDA-Soft to the latest version provided by the vendor.

What type of vulnerability is ZDI-CAN-28685?

ZDI-CAN-28685 is a stack-based buffer overflow vulnerability that allows remote code execution.

What are the requirements for exploiting ZDI-CAN-28685?

Exploitation of ZDI-CAN-28685 requires user interaction, such as visiting a malicious page or opening a malicious file.

Which software is affected by ZDI-CAN-28685?

ZDI-CAN-28685 affects installations of Delta Electronics ASDA-Soft.