---
id: CVE-2026-78308
title: >-
  Improper Authentication vulnerability in DIAEnergie allows Authentication
  Bypass.


  This issue affects DIAEnergie: before 1.11.00.022.
summary: >-
  Improper Authentication vulnerability in DIAEnergie allows Authentication
  Bypass.


  This issue affects DIAEnergie: before 1.11.00.022.
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-287
vendor: Deltaww
product: DIAEnergie
affected:
  - DIAEnergie < 1.11.00.022
published: '2026-09-24'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T19:39:45.600'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-78308'
references:
  - url: >-
      https://filecenter.deltaww.com/news/download/doc/Delta-PCSA-2026-00014_DIAEnergie%20Multiple%20Vulberabilities%20(CVE-2026-78308%20~%2078313).pdf
    label: 759f5e80-c8e1-4224-bead-956d7b33c98b
tags:
  - nvd
  - cve.org
epss: 0.00346
epssPercentile: 0.25343
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-09-24T12:36:13.592917Z'
ingestedAt: '2026-09-24T09:40:50.741Z'
---

## Overview

Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass.

This issue affects DIAEnergie: before 1.11.00.022.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.