Veille CVE

Mardi 20 octobre 2026

7 CVE sur 25

  1. CVE-2026-43854 6.3 Moyenne

    Advantech ADAM-3600

    A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.

  2. CVE-2026-43849 6.9 Moyenne

    Advantech ADAM-3600

    A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.

  3. CVE-2026-43848 6.9 Moyenne

    Advantech ADAM-3600

    A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.

  4. CVE-2026-43843 6.9 Moyenne

    Advantech ADAM-3600

    An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.

  5. CVE-2026-43842 6.9 Moyenne

    Advantech ADAM-3600

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

  6. CVE-2026-43841 6.9 Moyenne

    Advantech ADAM-3600

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function.

  7. CVE-2026-43840 6.9 Moyenne

    Advantech ADAM-3600

    A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.