🔐 CVE Alert

CVE-2026-43830

CRITICAL 9.8
CVSS Score
9.8
EPSS Score
0.6%
EPSS Percentile
48th

A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.

Vendor advantech
Product adam-3600
Published Jul 31, 2026
Last Updated Oct 20, 2026
Stay Ahead of the Next One

Get instant alerts for advantech adam-3600

Be the first to know when new critical vulnerabilities affecting advantech adam-3600 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Advantech / ADAM-3600
prior to version 2.8.5.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
csa.gov.sg: https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-149 advantech.com: https://www.advantech.com/en/security-advisory github.com: https://github.com/CVEProject/cvelistV5/blob/8846a06bd73fefb0d7b7e205f1e21f97d0b9cbe2/cves/2026/43xxx/CVE-2026-43830.json

Credits

Simone Bossi and Raffaele Bova at Nozomi Networks