CVE-2026-3094 — File Parsing Out-Of-Bounds Write in CNCSoft-G2

CVE-2026-3094

File Parsing Out-Of-Bounds Write in CNCSoft-G2 PUBLISHED

Description (CNA)

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

Affected (CNA)

Vendor / product	Versions
deltaww / CNCSoft-G2	affected 0 before 2.1.0.39

CWE

CWE-787

References

https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00004_CNCSoft-G2_File%20Parsing%20Out-Of-Bounds%20Write.pdf

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.