CVE-2026-43835

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.

Score

CVSS 4.0 8.6 High

Status

Deferred - 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Published

2026-10-20

Last modified

2026-10-20

Weaknesses

CWE-345

Affected products

• Adam-3600 (Advantech)

References

• https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-149
• https://www.advantech.com/en/security-advisory