# CVE-2026-43854: Advantech ADAM-3600 EdgeLink sensitive data exposure in project files

Source: https://junglewise.ai/threats/cve-2026-43854-a-vulnerability-could-allow-an-attacker-with-access-to-an  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-20. Updated: 2026-10-20  
License: CC BY 4.0 with a link back

CVE-2026-43854 · Severity: info · Published 2026-10-20

The Advantech ADAM-3600 EdgeLink is a remote terminal unit used for industrial data acquisition and remote monitoring. An attacker with access to an encrypted project file can retrieve administrator credentials for EdgeLink-enabled devices, potentially leading to unauthorized device access and control. This vulnerability could allow an attacker to compromise industrial systems and sensitive operations.

Technologies: [Advantech ADAM-3600 EdgeLink](https://junglewise.ai/threats/technologies/adam-3600-edgelink). Vendors: [Advantech](https://junglewise.ai/threats/vendors/advantech).

## Quick answers

**Is CVE-2026-43854 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-43854 being exploited in the wild.

**How severe is CVE-2026-43854?** Informational severity, published 20 October 2026.

**Which products and versions are affected?** Advantech ADAM-3600 EdgeLink <UNKNOWN>.

**Is there a fix for CVE-2026-43854?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-43854 attacked?** It is attacked from the adjacent network or with local access.

**Am I affected by CVE-2026-43854?** Check whether you run Advantech ADAM-3600 EdgeLink at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

CVE-2026-43854 allows credential extraction from encrypted project files in Advantech ADAM-3600 EdgeLink devices. The vulnerability enables an attacker with file access to decrypt or extract administrator credentials stored in project files, bypassing authentication controls. This is a local/adjacent attack requiring prior file access but no authentication to the device itself.

## Affected products

- Advantech ADAM-3600 EdgeLink <UNKNOWN>

## Timeline

- 2026-10-20: disclosed

## References

- [https://www.advantech.com/en/security-advisory](https://www.advantech.com/en/security-advisory)
- [https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-149](https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-149)

## Related threats

- [Advantech ADAM-3600 EdgeLink stack-based buffer overflow in login](https://junglewise.ai/threats/cve-2026-43858-a-stack-based-buffer-overflow-vulnerability-could-allow-a-remote)
- [Advantech ADAM-3600 EdgeLink arbitrary code execution via proprietary protocol](https://junglewise.ai/threats/cve-2026-43857-a-vulnerability-could-allow-a-remote-authenticated-attacker-to)
- [Advantech ADAM-3600 stack-based buffer overflow in FileProcess CheckDir](https://junglewise.ai/threats/cve-2026-43856-a-stack-based-buffer-overflow-vulnerability-in-the-fileprocess)
- [Advantech ADAM-3600 EdgeLink heap buffer overflow remote authenticated code execution](https://junglewise.ai/threats/cve-2026-43855-a-heap-based-buffer-overflow-vulnerability-could-allow-a-remote)
- [Advantech ADAM-3600 EdgeLink denial of service via assertion fault](https://junglewise.ai/threats/cve-2026-43853-a-vulnerability-could-allow-an-attacker-to-send-a-crafted-message)