Medium severity · published Oct 20, 2026
CVE-2026-43843
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service
6.9
CVSS
0.3%
EPSS
No
On KEV
Description
An integer overflow vulnerability in the license manager service could allow an unauthenticated attacker to crash the service.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
ADAM-3600 · Advantech
prior to version 2.8.5.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-43843
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-43843
www.advantech.com
https://www.advantech.com/en/security-advisory
www.csa.gov.sg
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-149
More from ADAM-3600
9.8
CVE-2026-43830
A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands
9.3
CVE-2026-43844
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism
9.3
CVE-2026-43836
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges
9.2
CVE-2026-43845
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism
9.2
CVE-2026-43838
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution