Is CVE-2026-5726 actively exploited?

No active exploitation of CVE-2026-5726 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-5726 be exploited remotely?

No. CVE-2026-5726 requires local access to exploit.

What is the CVSS score of CVE-2026-5726?

CVE-2026-5726 has a CVSS score of 8.4 (HIGH).

HOME VULNERABILITIESCVE-2026-5726

HIGH

CVE-2026-5726

CWE-121Published: April 8, 2026· Updated: Apr 13, 2026

8.4

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:0.2th

Official Description

ASDA-Soft Stack-based Buffer Overflow Vulnerability

NVD Source

Technical Analysis

CVE-2026-5726 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.4.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

deltaww1 product

asda soft

Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttps://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00007_ASDA-Soft%20Stack-based%20Buffer%20Overflow%20Vulnerability%20(CVE-2026-5726).pdf

News & Research Mentioning CVE-2026-5726

Delta Electronics ASDA-Soft

CISA Alerts· Apr 16, 2026

View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. The following versions of Delta Electronics ASDA-Soft are affected: ASDA-Soft <=V7.2.2.0 CVSS Vendor Equipment Vulnerabilities v3 7.8 Delta Electronics Delta Electronics ASDA-Soft Stack-based Buffer Overflow Background Critical Infrastructure Sectors: Critical Manufacturing Countries/Areas Deployed: Worldwide Company Headquarters Location: Taiwan Vulnerabilities Expand All + CVE-2026-5726 A stack-based buffer overflow vulnerability is triggered in ASDA-Soft version 7.2.0.0 during the parsing of malformed .par files. View CVE Details Affected Products Delta Electronics ASDA-Soft Vendor: Delta Electronics Product Version: Delta Electronics [xlite_meta score:69 src:CISA Alerts xlite_fp:d9d80a089192c2bb4aaebad0270b7213d5d0e710e25b1dab58341d2eb85fb308]