CVE-2026-3630 identifies a critical stack-based buffer overflow vulnerability (CWE-787) in Delta Electronics COMMGR2 products. This flaw carries a CVSS score of 9.8, indicating it can be exploited remotely over the network with low complexity and no user interaction or privileges required, potentially leading to complete compromise of confidentiality, integrity, and availability. While the vulnerability enables remote code execution, there is currently no evidence of active exploitation, nor are public exploit codes available in common repositories like Metasploit or ExploitDB. Community discussion and media coverage remain minimal, with only one article highlighting its critical nature.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2.11.1CPE matchmatch criteria | cpe:2.3:a:deltaww:commgr2:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Delta Electronics COMMGR Multiple Vulnerabilities
Mar 17, 2026Delta Electronics COMMGR Multiple Vulnerabilities
Mar 17, 2026Delta Electronics COMMGR Multiple Vulnerabilities
Mar 17, 2026Delta Electronics COMMGR Multiple Vulnerabilities
Mar 17, 2026Delta Electronics COMMGR Multiple Vulnerabilities
Mar 17, 2026Delta Electronics COMMGR Multiple Vulnerabilities
Mar 17, 2026