How do I check whether I am affected by CVE-2026-43839?

Open the ADAM-3600 EdgeLink firmware/version page in the device web UI. Any version below 2.8.5.0 is affected per the CVE record. Also check whether the device's management interface is reachable from untrusted networks.

What is the fix for CVE-2026-43839?

Update ADAM-3600 EdgeLink to the latest firmware from Advantech (advisory ACIRT-261001). Exact fixed version is unconfirmed: the CVE record says affected prior to 2.8.5.0, and a third party cites 2.8.5.1 for a sibling CVE. Until patched, keep the device off the internet and behind a firewall or segmented OT network.

Who is not affected by CVE-2026-43839?

Not affected if: not-network-reachable.

Live › vulnerability › CVE-2026-43839

Go to dashboard

high8.7Other

Unnamed logs management component: unauthenticated NULL dereference crashes service

Advantech ADAM-3600 EdgeLink remote terminal unit: a NULL pointer dereference in the logs management function lets an unauthenticated network attacker crash the service (denial of service, CVSS 4.0 8.7). One of 30 CVEs in Advantech advisory ACIRT-261001, patched 2026-10-15, public 2026-10-20. Discovered by Nozomi Networks. Not known to be exploited.

Summary written from the sources below. Check the originals before acting.

CVSS 4.0

8.7

high

scored by 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

known so far5 of 6

missing: exploitation

First public: Oct 20, 2026 UTC
Last modified: Oct 24, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: No.
Needs a special setup: Not known from the sources.
Reachable from: Not known from the sources.
Worst case: Unauthenticated attacker crashes the service repeatedly, causing denial of service.
CVSS said: 8.7. The facts above say low; we keep the sources' high until an analyst looks.

Who is affected

1 product

Know the next one before it finds you.

Add to Slack

Live › vulnerability › CVE-2026-43839

Go to dashboard

high8.7Other

Unnamed logs management component: unauthenticated NULL dereference crashes service

Summary written from the sources below. Check the originals before acting.

CVSS 4.0

8.7

high

scored by 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

known so far5 of 6

missing: exploitation

First public: Oct 20, 2026 UTC
Last modified: Oct 24, 2026
Status: open
Known exploitation: None reported
Public exploit: None on GitHub
EPSS: not scored

First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.

Why it is high, and not just CVSS

Likelihood → · Impact ↓

critical

high

medium

high

medium

low

medium

low

Exploited: No reports yet.
Needs login: No.
Needs a special setup: Not known from the sources.
Reachable from: Not known from the sources.
Worst case: Unauthenticated attacker crashes the service repeatedly, causing denial of service.
CVSS said: 8.7. The facts above say low; we keep the sources' high until an analyst looks.

Who is affected

1 product

Know the next one before it finds you.

Add to Slack

Unnamed logs management component: unauthenticated NULL dereference crashes service

Why it is high, and not just CVSS

Who is affected

Know the next one before it finds you.

Unnamed logs management component: unauthenticated NULL dereference crashes service

Why it is high, and not just CVSS

Who is affected

Know the next one before it finds you.

How to check

The fix

Who had it, and when

What the sources say, verbatim

Sources