{"id":"CVE-2026-43834","kind":"vulnerability","aliases":["CVE-2026-43834"],"related":[],"title":"Stack buffer overflow in logs settings lets authenticated attacker run code","description":"A stack-based buffer overflow vulnerability in the logs settings functionality could allow an authenticated attacker to achieve code execution.","summary":"Authenticated stack buffer overflow in the logs settings function of Advantech ADAM-3600 EdgeLink firmware before 2.8.5.0 allows code execution. Found by Nozomi Networks; fixed by Advantech on 2026-10-15; no known exploitation.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"ADAM-3600","fixed":["2.8.5.0"],"affected":"< 2.8.5.0","ecosystem":"vendor"}],"ecosystems":[],"tags":["adam-3600","advantech","authenticated","edgelink","firmware","ics","ot","other","rtu"],"not_affected_if":["auth-required","management-interface-not-reachable"],"how_to_check":"Check the ADAM-3600 firmware version in the device web UI/EdgeLink; versions below 2.8.5.0 are affected. Also check whether the management interface is reachable from untrusted networks.","fix":"Upgrade ADAM-3600 firmware to 2.8.5.0 or later (see Advantech security advisory ACIRT-261001). Restrict network access to the management interface and use strong admin credentials.","status":"open","published_at":"2026-10-20T08:16:44+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","triaged_at":"2026-10-25T03:22:48+00:00","updated_at":"2026-10-25T03:37:13+00:00","category":"other","confidence":0.8,"triage":{"at":"2026-10-25T03:22:48Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"Stack buffer overflow in logs settings lets authenticated attacker run code","impact":"high","summary":"A stack-based buffer overflow exists in the logs settings functionality of an unnamed product. An authenticated attacker can exploit it to execute code.","category":"other","nicknames":[],"who_cares":[],"confidence":0.4,"needs_auth":"yes","worst_case":"Attacker runs code after logging in.","analyst_note":"Identify the affected product and vendor from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-43834, then find the advisory for affected versions and the fixed release.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000487,"input_tokens":3260,"output_tokens":322,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the affected product and vendor from the NVD entry at https://nvd.nist.gov/vuln/detail/CVE-2026-43834, then find the advisory for affected versions and the fixed release.","search":"'-10':59B '-15':60B '-2026':13A,16A '-3600':19A,21B,42B '-43834':14A,17A '2.8.5.0':46B '2026':58B 'achiev':82C 'adam':18A,20B,41B 'advantech':22B,40B,56B 'allow':47B,77C 'attack':9A,80C 'authent':8A,23B,30B,79C 'base':67C 'buffer':2A,32B,68C 'code':11A,48B,83C 'could':76C 'cve':12A,15A 'edgelink':24B,43B 'execut':49B,84C 'exploit':63B 'firmwar':25B,44B 'fix':54B 'found':50B 'function':38B,75C 'ic':26B 'known':62B 'let':7A 'log':5A,36B,73C 'network':53B 'nozomi':52B 'ot':27B 'overflow':3A,33B,69C 'rtu':29B 'run':10A 'set':6A,37B,74C 'stack':1A,31B,66C 'stack-bas':65C 'vulner':70C","nicknames":[],"mitigations":[],"who_affected":null,"tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-20T08:16:44+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"5f57b9bf-260d-4433-bf07-b6a79e9bb7d4","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-43834","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43834","severity":null,"published_at":"2026-10-20T08:16:44+00:00","modified_at":"2026-10-20T19:30:59+00:00","first_seen_at":"2026-10-23T21:57:20+00:00","fetched_at":"2026-10-23T22:28:57+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-43834:756","url":null,"severity":null,"published_at":"2026-10-25T03:37:13+00:00","modified_at":"2026-10-25T03:37:13+00:00","first_seen_at":"2026-10-25T03:37:13+00:00","fetched_at":"2026-10-25T03:37:13+00:00","note":"Advantech ADAM-3600 EdgeLink RTU, ACIRT-261001 (one of ~30 CVEs fixed together). Vendor PDF confirms authenticated logs-settings stack overflow; fixed version 2.8.5.0 comes from the CVE record/CSA/Cyber Centre, not the visible part of the PDF, so nothing marked verified. No exploitation or PoC found."}],"documents":[{"id":1917,"url":"https://advcloudfiles.advantech.com/cms/de8e2d94-10ab-470e-ac6f-d2e5434f4ec4/Security%20Advisory%20PDF%20File/SECURITY-ADVISORY----ADAM-3600.pdf","title":"Advantech: Vulnerabilities Identified in ADAM-3600 (ACIRT-261001)","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":1913,"url":"https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-149","title":"CSA Singapore AL-2026-149: Advantech ADAM-3600 EdgeLink multiple vulnerabilities","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":3252,"url":"https://www.cve.org/CVERecord?id=CVE-2026-43834","title":"CVE Record CVE-2026-43834","kind":"other","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}