Advantech vulnerabilities
202 CVEs and advisories name Advantech as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-43858A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- CVE-2026-43857A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
- CVE-2026-43856A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arb
- CVE-2026-43855A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- CVE-2026-43854A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled
- CVE-2026-43853A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
- CVE-2026-43852A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
- CVE-2026-43851A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
- CVE-2026-43850A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
- CVE-2026-43849A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
- CVE-2026-43848A vulnerability in the bulk port configuration functionality could allow an unauthenticated attacker to crash the service.
- CVE-2026-43847A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even whe
- CVE-2026-43846A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.
- CVE-2026-43845A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
- CVE-2026-43844A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
- CVE-2026-43843An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
- CVE-2026-43842A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the
- CVE-2026-43841A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the
- CVE-2026-43840A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the
- CVE-2026-43839A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.
- CVE-2026-43838A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
- CVE-2026-43837A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve code
- CVE-2026-43836A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
- CVE-2026-43835A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potent
- CVE-2026-43834A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code executi
- CVE-2026-73177Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of
- CVE-2026-73176Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
- CVE-2026-73175Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-
- CVE-2026-73174Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protoco
- CVE-2026-73173Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol o