CVE-2026-43853

8.2High

Published 20 Oct 2026 · NVD status: Received · AI triage by gemini-3.8-flash

8.2High

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None
Impact: High impact on availability
Weakness: —

Impact

Remote, unauthenticated attackers can crash the affected service by sending a crafted network message. This causes a denial of service without requiring user interaction.

Root cause

The service fails to safely handle malformed input, triggering an unhandled assertion fault that aborts the process.

Affected systems

Versions not listed — check the vendor advisory.

CVSS v4.0 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Fix & remediation

Check the Advantech security advisory for patched software or firmware versions. Until patched, restrict network access to the target service using firewall rules or ACLs to trusted hosts only.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-43853