CVE-2022-1098

Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition. When combined with the Incorrect Default Permissions vulnerability of 4.2.2 above, this makes it possible for an attacker to escalate privileges

• CWE-427
• CWE-427

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01Mitigation, Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-081-01Mitigation, Third Party Advisory, US Government Resource

Published

Apr 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1092The myCred WordPress plugin before 2.4.3.1 does not have aut…4.3
• CVE-2022-1093The WP Meta SEO WordPress plugin before 4.4.7 does not sanit…4.8
• CVE-2022-1094The amr users WordPress plugin before 4.59.4 does not saniti…4.8
• CVE-2022-1095The Mihdan: No External Links WordPress plugin before 5.0.2 …4.8
• CVE-2022-1096Type confusion in V8 in Google Chrome prior to 99.0.4844.84 …8.8
• CVE-2022-1097<code>NSSToken</code> objects were referenced via direct poi…6.5
• CVE-2022-1099Adding a very large number of tags to a runner in GitLab CE/…4.3
• CVE-2022-1100A potential DOS vulnerability was discovered in GitLab CE/EE…4.3
• CVE-2022-1101A vulnerability was found in SourceCodester Royale Event Man…9.8
• CVE-2022-1102A vulnerability classified as problematic has been found in …6.1
• CVE-2022-1103The Advanced Uploader WordPress plugin through 4.2 allows an…8.8
• CVE-2022-1104The Popup Maker WordPress plugin before 1.16.5 does not sani…4.8