CVE-2026-43840

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the on_disconnected callback function.

Score

CVSS 4.0 6.9 Medium

Status

Deferred - 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Published

2026-10-20

Last modified

2026-10-20

Affected products

• Adam-3600 (Advantech)

References

• https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-149
• https://www.advantech.com/en/security-advisory