CVE-2026-43856
Quick assessment
Affected
Advantech ADAM-3600
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
函数中存在一个基于栈的缓冲区溢出漏洞，远程已认证攻击者可通过提供超过 1024 字节的路径，利用该漏洞实现任意代码执行。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-43856
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-43856
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-43856
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-43856 (1)
Same Patch Batch · Advantech · 2026-10-20 · 25 CVEs total
| CVE-2026-43836 | 9.3 CRITICAL | 软件任意命令执行漏洞 |
| CVE-2026-43844 | 9.3 CRITICAL | 专有协议认证绕过漏洞 |
| CVE-2026-43838 | 9.2 CRITICAL | 登录功能栈缓冲区溢出漏洞可导致代码执行 |
| CVE-2026-43845 | 9.2 CRITICAL | 密码重置机制漏洞导致认证绕过 |
| CVE-2026-43839 | 8.7 HIGH | 日志管理功能空指针解引用漏洞导致服务崩溃 |
| CVE-2026-43857 | 8.6 HIGH | 某服务远程认证攻击者可执行任意代码 |
| CVE-2026-43858 | 8.6 HIGH | 远程认证攻击者可利用堆栈溢出漏洞执行任意代码 |
| CVE-2026-43850 | 8.6 HIGH | 认证用户命令注入漏洞致系统提权至 Root |
| CVE-2026-43835 | 8.6 HIGH | 固件升级功能伪造文件上传漏洞 |
| CVE-2026-43846 | 8.6 HIGH | 某软件非功能特性栈缓冲区溢出漏洞 |
| CVE-2026-43847 | 8.2 HIGH | 私有协议允许暴力破解管理员密码，无视 SafeEnhancement |
| CVE-2026-43853 | 8.2 HIGH | 某软件存在断言故障漏洞，可导致服务崩溃 |
| CVE-2026-43852 | 8.2 HIGH | 某软件任意版本任意文件写入漏洞 |
| CVE-2026-43851 | 8.2 HIGH | 软件路径遍历漏洞：认证攻击者可读取任意文件 |
| CVE-2026-43855 | 7.5 HIGH | 堆缓冲区溢出漏洞致远程代码执行 |
| CVE-2026-43837 | 7.5 HIGH | 密码验证功能缓冲区溢出漏洞导致代码执行 |
| CVE-2026-43834 | 7.5 HIGH | 日志设置功能栈溢出漏洞致代码执行 |
| CVE-2026-43848 | 6.9 MEDIUM | 批量端口配置功能未认证远程服务崩溃漏洞 |
| CVE-2026-43842 | 6.9 MEDIUM | License Manager 服务 NULL 指针解引用漏洞 |
| CVE-2026-43843 | 6.9 MEDIUM | 许可证管理服务整数溢出导致拒绝服务漏洞 |
Showing top 20 of 25 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-43856
No comments yet