Advantech vulnerabilities
202 CVEs and advisories name Advantech as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-73172Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
- CVE-2026-73171Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EK
- CVE-2026-73170Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import w
- CVE-2026-73169Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability
- CVE-2026-73167Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
- CVE-2026-73166Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management inte
- CVE-2026-73165Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
- CVE-2026-73164Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
- CVE-2026-73163Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera
- CVE-2026-19535Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advan
- CVE-2026-79698Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection
- CVE-2026-79697Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection
- CVE-2026-43833A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.
- CVE-2026-43832A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution
- CVE-2026-43831A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code executi
- CVE-2026-43830A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.
- CVE-2026-43829A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution
- CVE-2026-14162Advantech｜Hospital Quering Management - Missing Authentication
- CVE-2026-14161Advantech｜Hospital Queuing Management - Sensitive Data Exposure
- CVE-2026-6888SQL Injection Vulnerability
- CVE-2026-2670Advantech WISE-6610-NB Background Management openvpn_apply os command injection
- CVE-2025-52694Execution of arbitrary SQL commands
- CVE-2025-67653Advantech WebAccess/SCADA Path Traversal
- CVE-2025-46268Advantech WebAccess/SCADA SQL Injection
- CVE-2025-14848Advantech WebAccess/SCADA Absolute Path Traversal
- CVE-2025-14849Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type
- CVE-2025-14850Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory
- CVE-2025-14252An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and
- CVE-2025-34256Advantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication Bypass
- CVE-2025-34265Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via rule-engines