High severity · published Oct 20, 2026
CVE-2026-43847
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is…
8.2
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in the proprietary protocol could allow an attacker to brute force the administrator password without restrictions, even when the SafeEnhancement feature is enabled.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
ADAM-3600 · Advantech
prior to version 2.8.5.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-43847
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-43847
www.advantech.com
https://www.advantech.com/en/security-advisory
www.csa.gov.sg
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-149
More from ADAM-3600
9.8
CVE-2026-43830
A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands
9.3
CVE-2026-43844
A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism
9.3
CVE-2026-43836
A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges
9.2
CVE-2026-43845
A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism
9.2
CVE-2026-43838
A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution