Search vulnerabilities

Results 31

Export CSV
CVE-2026-43829

A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43830

A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.

CVSS 4.0 · 8.6 High EPSS 2.5% KEV · Not listed
Vendors
Products
CVE-2026-43831

A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43832

A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement feature is enabled.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43833

Stack-Based Buffer Overflow in Upload Functionality Allowing Authenticated Code Execution

A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43834

Stack-based Buffer Overflow in Logs Settings of Advantech ADAM-3600

A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43856

Stack-Based Buffer Overflow in ADAM‑3600 CheckDir Function Allows Remote Code Execution

A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43854

Credential Disclosure via Encrypted Project File on Advantech ADAM‑3600

A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.

CVSS 4.0 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43858

Stack-based Buffer Overflow in Advantech ADAM‑3600 Allows Remote Authenticated Code Execution

A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43838

Stack-Based Buffer Overflow in Advantech ADAM-3600 Login Function

A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43848

Bulk Port Configuration Vulnerability Causes Service Crash on Advantech ADAM‑3600

A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43850

Command Injection Vulnerability Allowing Authenticated Root-Level Code Execution on Advantech ADAM-3600

A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.

CVSS 4.0 · 8.6 High EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2026-43852

Authenticated Arbitrary File Write in Advantech ADAM-3600

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43853

Assertion Fault Crash Causing Denial of Service in Advantech ADAM-3600 Firmware

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43836

Packet Forgery Vulnerability Enabling Remote Command Execution on Advantech ADAM‑3600

A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43843

An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43845

Password Reset Mechanism Bypass Enables Authentication Breach

A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43857

A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43841

NULL Pointer Dereference in Advantech ADAM‑3600 License Manager Service Allows Crash

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2026-43842

NULL Pointer Dereference in License Manager Service

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products