Vendor
Advantech vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 81 vulnerabilities in Advantech: 0 in the last 7 days and 42 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-43858, was published on 20 October 2026. 25 vulnerabilities in the last four weeks, up 67% on the four before (15). 22 technologies have a page of their own.
- Last 7 days
- 0
- Last 90 days
- 42
- Critical, all time
- 3
- Exploited in the wild
- 0
About Advantech
A global manufacturer of industrial computing, automation, and embedded systems.
Advantech technologies
- Advantech ADAM-3600 EdgeLink30
- Advantech EKI-1242EIMS13
- Advantech Webaccess13
- Advantech Vpn12
- Advantech EKI-1242IEIMS12
- Advantech Wise-Deviceon Server10
- Advantech EdgeLink4
- Advantech Deviceon\3
- Advantech Iedge3
- Advantech WISE-6610-CB3
- Advantech WISE-6610-EB3
- Advantech WISE-6610-EL-CB3
- Advantech WISE-6610-EL-EB3
- Advantech WISE-6610-EL-JB3
- Advantech WISE-6610-EL-NB3
- Advantech WISE-6610-EL-TB3
- Advantech WISE-6610-JB3
- Advantech WISE-6610-NB3
- Advantech WISE-6610-TB3
- Advantech WISE-6610P-DEA3
- Advantech WISE-6610P-DNA3
- Advantech WISE-6610P-DTA3
Latest Advantech vulnerabilities
- CVE-2026-43858: Advantech ADAM-3600 EdgeLink stack-based buffer overflow in logininfo
- CVE-2026-43857: Advantech ADAM-3600 EdgeLink arbitrary code execution via proprietary protocolinfo
- CVE-2026-43856: Advantech ADAM-3600 stack-based buffer overflow in FileProcess CheckDirinfo
- CVE-2026-43855: Advantech ADAM-3600 EdgeLink heap buffer overflow remote authenticated code executioninfo
- CVE-2026-43854: Advantech ADAM-3600 EdgeLink sensitive data exposure in project filesinfo
- CVE-2026-43853: Advantech ADAM-3600 EdgeLink denial of service via assertion faultinfo
- CVE-2026-43852: Advantech ADAM-3600 EdgeLink arbitrary file writeinfo
- CVE-2026-43851: Advantech ADAM-3600 EdgeLink path traversal in file accessinfo
- CVE-2026-43850: Advantech ADAM-3600 command injection allows root code executioninfo
- CVE-2026-43849: Advantech ADAM-3600 EdgeLink heap memory read information leakinfo
- CVE-2026-43848: Advantech ADAM-3600 EdgeLink denial of service in bulk port configurationinfo
- CVE-2026-43847: Advantech ADAM-3600 proprietary protocol password brute forceinfo
- CVE-2026-43846: Advantech ADAM-3600 EdgeLink stack overflow in non-functional featureinfo
- CVE-2026-43845: Advantech ADAM-3600 authentication bypass in password resetinfo
- CVE-2026-43844: Advantech ADAM-3600 EdgeLink proprietary protocol authentication bypassinfo
- CVE-2026-43843: Advantech ADAM-3600 integer overflow in license managerinfo
- CVE-2026-43842: Advantech ADAM-3600 NULL pointer dereference in license managerinfo
- CVE-2026-43841: Advantech ADAM-3600 NULL pointer dereference in license managerinfo
- CVE-2026-43840: Advantech ADAM-3600 NULL pointer dereference in license managerinfo
- CVE-2026-43839: Advantech ADAM-3600 NULL pointer dereference in logs managementinfo
- CVE-2026-43838: Advantech ADAM-3600 stack overflow in logininfo
- CVE-2026-43837: Advantech ADAM-3600 buffer overflow in password verificationinfo
- CVE-2026-43836: Advantech ADAM-3600 EdgeLink proprietary protocol packet forgery RCEinfo
- CVE-2026-43835: Advantech ADAM-3600 EdgeLink firmware upgrade authentication bypassinfo
- CVE-2026-43834: Advantech ADAM-3600 stack-based buffer overflow in logs settingsinfo
Most severe Advantech vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-79697: Advantech WISE-6610 command injection in certificate deletioncriticalCVSS 9.9EPSS 4.9%
- CVE-2026-79698: Advantech WISE-6610 command injection in Node-RED LibrarycriticalCVSS 9.9EPSS 3.1%
- CVE-2026-14162: Advantech Hospital Queuing Management missing authentication in APIcriticalCVSS 9.8
- CVE-2025-62630: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse…highCVSS 8.8EPSS 0.7%
- CVE-2025-14849: Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute…highCVSS 8.8EPSS 0.6%
- CVE-2025-58423: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a…highCVSS 8.8EPSS 0.6%
- CVE-2025-59171: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse…highCVSS 7.5EPSS 0.8%
- CVE-2026-14161: Advantech Hospital Queuing Management sensitive data exposure in API documentationhighCVSS 7.5
- CVE-2026-2670: Advantech WISE-6610 OS command injection in OpenVPN managementhighCVSS 7.2EPSS 3.6%
- CVE-2025-34239: Advantech WebAccess/VPN versions prior to 1.1.5 contain a command injection vulnerability in…highCVSS 7.2EPSS 1.7%
Vulnerabilities per week
25 vulnerabilities in the last four weeks, up 67% on the four before (15). The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 2 | 2 | |
| 14 Sep 2026 | 15 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 25 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Advantech vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/advantech)<a href="https://junglewise.ai/threats/vendors/advantech"><img src="https://junglewise.ai/threats/vendors/advantech/badge.svg" alt="Advantech vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/advantech.json, and this page as text at https://junglewise.ai/threats/vendors/advantech.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Advantech vulnerabilities", https://junglewise.ai/threats/vendors/advantech, 9 November 2026.