{"id":"CVE-2026-3630","aliases":["EUVD-2026-10286","GHSA-642c-46j5-rhcm"],"status":"published","title":"Stack-based Buffer Overflow Vulnerability in COMMGR2","description":"Delta Electronics COMMGR2 has \n\nStack-based Buffer Overflow vulnerability.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0096,"percentile":0.61766,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2026-03-09T02:49:40Z","modified":"2026-06-17T10:43:53Z","products":[{"vendor":"deltaww","product":"commgr2"}],"references":[{"url":"https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00005_COMMGR%202%20Multiple%20Vulnerabilities%20(CVE-2026-3630,%20CVE-2026-3631).pdf","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-3630"},{"url":"https://github.com/advisories/GHSA-642c-46j5-rhcm"}],"sources":{"cve":[{"id":"CVE-2026-3630","title":"Stack-based Buffer Overflow Vulnerability in COMMGR2","description":"Delta Electronics COMMGR2 has \n\nStack-based Buffer Overflow vulnerability.","status":"published","published":"2026-03-09T02:49:40.162Z","modified":"2026-03-09T18:27:58.403Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"updated_at":"2026-11-02T13:48:58.05327Z"}],"euvd":[{"id":"EUVD-2026-10286","description":"Delta Electronics COMMGR2 has \n\nStack-based Buffer Overflow vulnerability.","status":"published","published":"2026-03-09T02:49:40Z","modified":"2026-03-09T18:27:58Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:48:06.581696Z"}],"ghsa":[{"id":"GHSA-642c-46j5-rhcm","title":"Delta Electronics COMMGR2 has \n\nStack-based Buffer Overflow vulnerability.","description":"Delta Electronics COMMGR2 has \n\nStack-based Buffer Overflow vulnerability.","status":"published","published":"2026-03-09T06:31:13Z","modified":"2026-03-10T21:32:13Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T15:06:33.229996Z"}],"nvd":[{"id":"CVE-2026-3630","description":"Delta Electronics COMMGR2 has \n\nStack-based Buffer Overflow vulnerability.","status":"published","published":"2026-03-09T04:15:58.373Z","modified":"2026-06-17T10:43:53.58Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:12:08.279852Z"}]}}