Veille CVE

Mardi 20 octobre 2026

25 CVE

  1. CVE-2026-43858 8.6 Élevée

    Advantech ADAM-3600

    A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

  2. CVE-2026-43857 8.6 Élevée

    Advantech ADAM-3600

    A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.

  3. CVE-2026-43856 8.6 Élevée

    Advantech ADAM-3600

    A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.

  4. CVE-2026-43855 7.5 Élevée

    Advantech ADAM-3600

    A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.

  5. CVE-2026-43854 6.3 Moyenne

    Advantech ADAM-3600

    A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.

  6. CVE-2026-43853 8.2 Élevée

    Advantech ADAM-3600

    A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

  7. CVE-2026-43852 8.2 Élevée

    Advantech ADAM-3600

    A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

  8. CVE-2026-43851 8.2 Élevée

    Advantech ADAM-3600

    A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

  9. CVE-2026-43850 8.6 Élevée

    Advantech ADAM-3600

    A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.

  10. CVE-2026-43849 6.9 Moyenne

    Advantech ADAM-3600

    A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

  11. CVE-2026-43848 6.9 Moyenne

    Advantech ADAM-3600

    A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.

  12. CVE-2026-43847 8.2 Élevée

    Advantech ADAM-3600

    A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.

  13. CVE-2026-43846 8.6 Élevée

    Advantech ADAM-3600

    A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.

  14. CVE-2026-43845 9.2 Critique

    Advantech ADAM-3600

    A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.

  15. CVE-2026-43844 9.3 Critique

    Advantech ADAM-3600

    A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

  16. CVE-2026-43843 6.9 Moyenne

    Advantech ADAM-3600

    An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.

  17. CVE-2026-43842 6.9 Moyenne

    Advantech ADAM-3600

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

  18. CVE-2026-43841 6.9 Moyenne

    Advantech ADAM-3600

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.

  19. CVE-2026-43840 6.9 Moyenne

    Advantech ADAM-3600

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

  20. CVE-2026-43839 8.7 Élevée

    Advantech ADAM-3600

    A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.

  21. CVE-2026-43838 9.2 Critique

    Advantech ADAM-3600

    A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.

  22. CVE-2026-43837 7.5 Élevée

    Advantech ADAM-3600

    A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code execution.

  23. CVE-2026-43836 9.3 Critique

    Advantech ADAM-3600

    A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.

  24. CVE-2026-43835 8.6 Élevée

    Advantech ADAM-3600

    A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.

  25. CVE-2026-43834 7.5 Élevée

    Advantech ADAM-3600

    A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.