[ Vendor · 25 CVEs ]
Advantech
CVEs affecting Advantech published in the last 30 days, plus any Advantech CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-43851 | 20 Oct 2026 | CVSS 8.2 | Advantech ADAM-3600A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system. | |
| CVE-2026-43852 | 20 Oct 2026 | CVSS 8.2 | Advantech ADAM-3600A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system. | |
| CVE-2026-43853 | 20 Oct 2026 | CVSS 8.2 | Advantech ADAM-3600A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash. | |
| CVE-2026-43854 | 20 Oct 2026 | CVSS 6.3 | Advantech ADAM-3600A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices. | |
| CVE-2026-43855 | 20 Oct 2026 | CVSS 7.5 | Advantech ADAM-3600A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. | |
| CVE-2026-43856 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary… | |
| CVE-2026-43857 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service. | |
| CVE-2026-43858 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution. | |
| CVE-2026-43849 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data. | |
| CVE-2026-43850 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system. | |
| CVE-2026-43846 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution. | |
| CVE-2026-43847 | 20 Oct 2026 | CVSS 8.2 | Advantech ADAM-3600A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the… | |
| CVE-2026-43848 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service. | |
| CVE-2026-43837 | 20 Oct 2026 | CVSS 7.5 | Advantech ADAM-3600A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code… | |
| CVE-2026-43838 | 20 Oct 2026 | CVSS 9.2 | Advantech ADAM-3600A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution. | |
| CVE-2026-43839 | 20 Oct 2026 | CVSS 8.7 | Advantech ADAM-3600A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service. | |
| CVE-2026-43840 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the… | |
| CVE-2026-43841 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the… | |
| CVE-2026-43842 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the… | |
| CVE-2026-43843 | 20 Oct 2026 | CVSS 6.9 | Advantech ADAM-3600An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service. | |
| CVE-2026-43844 | 20 Oct 2026 | CVSS 9.3 | Advantech ADAM-3600A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism. | |
| CVE-2026-43845 | 20 Oct 2026 | CVSS 9.2 | Advantech ADAM-3600A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism. | |
| CVE-2026-43836 | 20 Oct 2026 | CVSS 9.3 | Advantech ADAM-3600A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges. | |
| CVE-2026-43834 | 20 Oct 2026 | CVSS 7.5 | Advantech ADAM-3600A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution. | |
| CVE-2026-43835 | 20 Oct 2026 | CVSS 8.6 | Advantech ADAM-3600A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially… |