CVE-2026-43833

MediumCVSS 5.3/10Last modified Oct 20, 2026

Description

A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

VendorProductVersions
AdvantechADAM-3600prior to version 2.8.5.0

References

Timeline

Published
Jul 31, 2026
Last modified
Oct 20, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-438347.5A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code executiCVE-2026-438358.6A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentCVE-2026-438369.3A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.CVE-2026-438377.5A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest authentication to achieve codeCVE-2026-438389.2A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.CVE-2026-438398.7A NULL pointer dereference vulnerability in the logs management functionality could allow an unauthenticated attacker to crash the service.CVE-2026-438406.9A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via theCVE-2026-438416.9A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via theCVE-2026-438426.9A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via theCVE-2026-438436.9An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.CVE-2026-438449.3A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.CVE-2026-438459.2A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
CVE-2026-43833: Medium severity, CVSS 5.3 | Vulnix