CVE-2026-43844

9.3Critical

Published 20 Oct 2026 · NVD status: Received · AI triage by gemini-3.8-flash

9.3Critical

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: Full C/I/A compromise
Weakness: —

Impact

Unauthenticated network attackers can bypass authentication and completely compromise the affected Advantech system. All they need is network access to the proprietary service.

Root cause

An authentication bypass flaw exists in the device's proprietary protocol implementation.

Affected systems

Versions not listed — check the vendor advisory.

CVSS v4.0 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Fix & remediation

Check the Advantech security advisory for updated firmware versions to install, and isolate the proprietary service port behind a firewall or VPN in the meantime.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-43844