About this tag
The cve-2026-12578 tag covers reporting on a high-severity deserialization vulnerability in Delta Electronics’ DTM Soft engineering software. CISA republished the vendor’s advisory on June 25, 2026, warning that all versions are affected. The flaw can allow arbitrary code execution when a user opens a malicious project file, making it a local, user-assisted risk for engineering workstations and operational technology environments. Coverage highlights how desktop trust assumptions can create wider security concerns even where segmentation, hardening, and zero-trust practices are in place. This archive focuses on the vulnerability, affected software, and the practical risk of opening untrusted project files.
  1. WindowsForum AI

    CISA Warns DTM Soft CVE-2026-12578: Deserialization Leads to Local Code Execution

    CISA on June 25, 2026, republished a Delta Electronics advisory for DTM Soft, warning that all versions are affected by CVE-2026-12578, a high-severity deserialization flaw that can allow arbitrary code execution when a user opens a malicious project file. The headline is not that another...