CVE-2026-3630 - Vulnerability Analysis
CriticalCVSS: 9.8Last Updated: March 10, 2026
Delta Electronics COMMGR2 - Buffer Overflow
Overview
Delta Electronics COMMGR2 contains a stack-based buffer overflow vulnerability, letting attackers potentially execute arbitrary code, exploit requires no special privileges.
Severity & Score
Impact
Attackers can execute arbitrary code remotely, potentially leading to full system compromise.
Mitigation
Update to the latest version.
Social Media Activity(1 post)
Critical RCE Vulnerability Patched in Delta Electronics COMMGR 2 Delta Electronics patched a critical stack-based buffer overflow (CVE-2026-3630) and an out-of-bounds read (CVE-2026-3631) in its COMMGR 2 software that could allow unauthenticated attackers to execute remote code or leak sensitive data. **Make sure all industrial devices are isolated from the internet and accessible from trusted networks only. Update Delta Electronics COMMGR 2 software to version 2.11.1 as soon as possible. In the meantime make sure they are isolated from the internet.** #cybersecurity #infosec #advisory #vulnerability https://beyondmachines.net/event_details/critical-rce-vulnerability-patched-in-delta-electronics-commgr-2-l-p-i-8-y/gD2P6Ple2L
View original postRelated Resources
Details
- CVE ID
- CVE-2026-3630
- Severity
- Critical
- CVSS Score
- 9.8
- Type
- buffer_overflow
- Status
- confirmed
- EPSS
- 6.0%
- Social Posts
- 1
CWE
- CWE-787
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H