# Advantech vulnerabilities Source: https://junglewise.ai/threats/vendors/advantech Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/advantech.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 81 vulnerabilities in Advantech: 0 in the last 7 days and 42 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-43858, was published on 20 October 2026. 25 vulnerabilities in the last four weeks, up 67% on the four before (15). 22 technologies have a page of their own. ## Counts - Last 7 days: 0 - Last 30 days: 25 - Last 90 days: 42 - All time: 81 (3 critical, 0 exploited in the wild) ## About Advantech A global manufacturer of industrial computing, automation, and embedded systems. ## Latest Advantech vulnerabilities - [CVE-2026-43858: Advantech ADAM-3600 EdgeLink stack-based buffer overflow in login](https://junglewise.ai/threats/cve-2026-43858-a-stack-based-buffer-overflow-vulnerability-could-allow-a-remote) (info, published 20 Oct 2026) - [CVE-2026-43857: Advantech ADAM-3600 EdgeLink arbitrary code execution via proprietary protocol](https://junglewise.ai/threats/cve-2026-43857-a-vulnerability-could-allow-a-remote-authenticated-attacker-to) (info, published 20 Oct 2026) - [CVE-2026-43856: Advantech ADAM-3600 stack-based buffer overflow in FileProcess CheckDir](https://junglewise.ai/threats/cve-2026-43856-a-stack-based-buffer-overflow-vulnerability-in-the-fileprocess) (info, published 20 Oct 2026) - [CVE-2026-43855: Advantech ADAM-3600 EdgeLink heap buffer overflow remote authenticated code execution](https://junglewise.ai/threats/cve-2026-43855-a-heap-based-buffer-overflow-vulnerability-could-allow-a-remote) (info, published 20 Oct 2026) - [CVE-2026-43854: Advantech ADAM-3600 EdgeLink sensitive data exposure in project files](https://junglewise.ai/threats/cve-2026-43854-a-vulnerability-could-allow-an-attacker-with-access-to-an) (info, published 20 Oct 2026) - [CVE-2026-43853: Advantech ADAM-3600 EdgeLink denial of service via assertion fault](https://junglewise.ai/threats/cve-2026-43853-a-vulnerability-could-allow-an-attacker-to-send-a-crafted-message) (info, published 20 Oct 2026) - [CVE-2026-43852: Advantech ADAM-3600 EdgeLink arbitrary file write](https://junglewise.ai/threats/cve-2026-43852-a-vulnerability-could-allow-an-authenticated-attacker-to-write) (info, published 20 Oct 2026) - [CVE-2026-43851: Advantech ADAM-3600 EdgeLink path traversal in file access](https://junglewise.ai/threats/cve-2026-43851-a-path-traversal-vulnerability-could-allow-an-authenticated) (info, published 20 Oct 2026) - [CVE-2026-43850: Advantech ADAM-3600 command injection allows root code execution](https://junglewise.ai/threats/cve-2026-43850-a-command-injection-vulnerability-could-allow-an-authenticated) (info, published 20 Oct 2026) - [CVE-2026-43849: Advantech ADAM-3600 EdgeLink heap memory read information leak](https://junglewise.ai/threats/cve-2026-43849-a-heap-memory-read-vulnerability-could-allow-an-attacker-to) (info, published 20 Oct 2026) - [CVE-2026-43848: Advantech ADAM-3600 EdgeLink denial of service in bulk port configuration](https://junglewise.ai/threats/cve-2026-43848-a-vulnerability-in-the-bulk-port-configuration-functionality) (info, published 20 Oct 2026) - [CVE-2026-43847: Advantech ADAM-3600 proprietary protocol password brute force](https://junglewise.ai/threats/cve-2026-43847-a-vulnerability-in-the-proprietary-protocol-could-allow-an) (info, published 20 Oct 2026) - [CVE-2026-43846: Advantech ADAM-3600 EdgeLink stack overflow in non-functional feature](https://junglewise.ai/threats/cve-2026-43846-a-stack-based-buffer-overflow-vulnerability-in-a-non-functional) (info, published 20 Oct 2026) - [CVE-2026-43845: Advantech ADAM-3600 authentication bypass in password reset](https://junglewise.ai/threats/cve-2026-43845-a-vulnerability-in-the-password-reset-mechanism-could-allow-an) (info, published 20 Oct 2026) - [CVE-2026-43844: Advantech ADAM-3600 EdgeLink proprietary protocol authentication bypass](https://junglewise.ai/threats/cve-2026-43844-a-vulnerability-in-the-proprietary-protocol-could-allow-an) (info, published 20 Oct 2026) - [CVE-2026-43843: Advantech ADAM-3600 integer overflow in license manager](https://junglewise.ai/threats/cve-2026-43843-an-integer-overflow-vulnerability-in-the-license-manager-service) (info, published 20 Oct 2026) - [CVE-2026-43842: Advantech ADAM-3600 NULL pointer dereference in license manager](https://junglewise.ai/threats/cve-2026-43842-a-null-pointer-dereference-vulnerability-in-the-license-manager) (info, published 20 Oct 2026) - [CVE-2026-43841: Advantech ADAM-3600 NULL pointer dereference in license manager](https://junglewise.ai/threats/cve-2026-43841-a-null-pointer-dereference-vulnerability-in-the-license-manager) (info, published 20 Oct 2026) - [CVE-2026-43840: Advantech ADAM-3600 NULL pointer dereference in license manager](https://junglewise.ai/threats/cve-2026-43840-a-null-pointer-dereference-vulnerability-in-the-license-manager) (info, published 20 Oct 2026) - [CVE-2026-43839: Advantech ADAM-3600 NULL pointer dereference in logs management](https://junglewise.ai/threats/cve-2026-43839-a-null-pointer-dereference-vulnerability-in-the-logs-management) (info, published 20 Oct 2026) - [CVE-2026-43838: Advantech ADAM-3600 stack overflow in login](https://junglewise.ai/threats/cve-2026-43838-a-stack-based-buffer-overflow-vulnerability-in-the-login) (info, published 20 Oct 2026) - [CVE-2026-43837: Advantech ADAM-3600 buffer overflow in password verification](https://junglewise.ai/threats/cve-2026-43837-a-buffer-overflow-vulnerability-in-the-password-verification) (info, published 20 Oct 2026) - [CVE-2026-43836: Advantech ADAM-3600 EdgeLink proprietary protocol packet forgery RCE](https://junglewise.ai/threats/cve-2026-43836-a-vulnerability-could-allow-an-attacker-to-forge-a-packet-to) (info, published 20 Oct 2026) - [CVE-2026-43835: Advantech ADAM-3600 EdgeLink firmware upgrade authentication bypass](https://junglewise.ai/threats/cve-2026-43835-a-vulnerability-in-the-firmware-upgrade-functionality-could-allow) (info, published 20 Oct 2026) - [CVE-2026-43834: Advantech ADAM-3600 stack-based buffer overflow in logs settings](https://junglewise.ai/threats/cve-2026-43834-a-stack-based-buffer-overflow-vulnerability-in-the-logs-settings) (info, published 20 Oct 2026) ## Most severe Advantech vulnerabilities - [CVE-2026-79697: Advantech WISE-6610 command injection in certificate deletion](https://junglewise.ai/threats/cve-2026-79697-advantech-wise-6610-command-injection-in-certificate-deletion) (critical, CVSS 9.9, published 7 Sep 2026) - [CVE-2026-79698: Advantech WISE-6610 command injection in Node-RED Library](https://junglewise.ai/threats/cve-2026-79698-advantech-wise-6610-command-injection-in-node-red-library) (critical, CVSS 9.9, published 7 Sep 2026) - [CVE-2026-14162: Advantech Hospital Queuing Management missing authentication in API](https://junglewise.ai/threats/cve-2026-14162-advantech-hospital-queuing-management-missing-authentication-in) (critical, CVSS 9.8, published 30 Jun 2026) - [CVE-2025-62630: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse…](https://junglewise.ai/threats/cve-2025-62630-due-to-insufficient-sanitization-an-attacker-can-upload-a) (high, CVSS 8.8, published 6 Nov 2025) - [CVE-2025-14849: Advantech WebAccess/SCADA is vulnerable to unrestricted file upload, which may allow an attacker to remotely execute…](https://junglewise.ai/threats/cve-2025-14849-advantech-webaccess-scada-is-vulnerable-to-unrestricted-file) (high, CVSS 8.8, published 18 Dec 2025) - [CVE-2025-58423: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to cause a…](https://junglewise.ai/threats/cve-2025-58423-due-to-insufficient-sanitization-an-attacker-can-upload-a) (high, CVSS 8.8, published 6 Nov 2025) - [CVE-2025-59171: Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse…](https://junglewise.ai/threats/cve-2025-59171-due-to-insufficient-sanitization-an-attacker-can-upload-a) (high, CVSS 7.5, published 6 Nov 2025) - [CVE-2026-14161: Advantech Hospital Queuing Management sensitive data exposure in API documentation](https://junglewise.ai/threats/cve-2026-14161-advantech-hospital-queuing-management-sensitive-data-exposure-in) (high, CVSS 7.5, published 30 Jun 2026) - [CVE-2026-2670: Advantech WISE-6610 OS command injection in OpenVPN management](https://junglewise.ai/threats/cve-2026-2670-advantech-wise-6610-os-command-injection-in-openvpn-management) (high, CVSS 7.2, published 18 Feb 2026) - [CVE-2025-34239: Advantech WebAccess/VPN versions prior to 1.1.5 contain a command injection vulnerability in…](https://junglewise.ai/threats/cve-2025-34239-advantech-webaccess-vpn-versions-prior-to-1-1-5-contain-a-command) (high, CVSS 7.2, published 6 Nov 2025) ## Vulnerabilities per week 25 vulnerabilities in the last four weeks, up 67% on the four before (15). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 2 | 2 | 0 | | 14 Sep 2026 | 15 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 25 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Advantech technologies - [Advantech ADAM-3600 EdgeLink](https://junglewise.ai/threats/technologies/adam-3600-edgelink): 30 vulnerabilities - [Advantech EKI-1242EIMS](https://junglewise.ai/threats/technologies/eki-1242eims): 13 vulnerabilities - [Advantech Webaccess](https://junglewise.ai/threats/technologies/webaccess): 13 vulnerabilities - [Advantech Vpn](https://junglewise.ai/threats/technologies/advantech-vpn): 12 vulnerabilities - [Advantech EKI-1242IEIMS](https://junglewise.ai/threats/technologies/eki-1242ieims): 12 vulnerabilities - [Advantech Wise-Deviceon Server](https://junglewise.ai/threats/technologies/wise-deviceon-server): 10 vulnerabilities - [Advantech EdgeLink](https://junglewise.ai/threats/technologies/edgelink): 4 vulnerabilities - [Advantech Deviceon\](https://junglewise.ai/threats/technologies/deviceon): 3 vulnerabilities - [Advantech Iedge](https://junglewise.ai/threats/technologies/iedge): 3 vulnerabilities - [Advantech WISE-6610-CB](https://junglewise.ai/threats/technologies/wise-6610-cb): 3 vulnerabilities - [Advantech WISE-6610-EB](https://junglewise.ai/threats/technologies/wise-6610-eb): 3 vulnerabilities - [Advantech WISE-6610-EL-CB](https://junglewise.ai/threats/technologies/wise-6610-el-cb): 3 vulnerabilities - [Advantech WISE-6610-EL-EB](https://junglewise.ai/threats/technologies/wise-6610-el-eb): 3 vulnerabilities - [Advantech WISE-6610-EL-JB](https://junglewise.ai/threats/technologies/wise-6610-el-jb): 3 vulnerabilities - [Advantech WISE-6610-EL-NB](https://junglewise.ai/threats/technologies/wise-6610-el-nb): 3 vulnerabilities - [Advantech WISE-6610-EL-TB](https://junglewise.ai/threats/technologies/wise-6610-el-tb): 3 vulnerabilities - [Advantech WISE-6610-JB](https://junglewise.ai/threats/technologies/wise-6610-jb): 3 vulnerabilities - [Advantech WISE-6610-NB](https://junglewise.ai/threats/technologies/wise-6610-nb): 3 vulnerabilities - [Advantech WISE-6610-TB](https://junglewise.ai/threats/technologies/wise-6610-tb): 3 vulnerabilities - [Advantech WISE-6610P-DEA](https://junglewise.ai/threats/technologies/wise-6610p-dea): 3 vulnerabilities - [Advantech WISE-6610P-DNA](https://junglewise.ai/threats/technologies/wise-6610p-dna): 3 vulnerabilities - [Advantech WISE-6610P-DTA](https://junglewise.ai/threats/technologies/wise-6610p-dta): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Advantech vulnerabilities", https://junglewise.ai/threats/vendors/advantech, 9 November 2026.