Live › vulnerability › CVE-2026-43853
Go to dashboardAdvantech ADAM-3600 EdgeLink (industrial remote terminal unit): a crafted network message triggers a reachable assertion (CWE-617) and crashes the service, denying availability. CVSS 4.0 8.2, no privileges needed. Part of a 30-CVE Advantech batch. No known exploitation or public PoC.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Anyone running Advantech ADAM-3600 EdgeLink RTUs on firmware before 2.8.5.0, typically industrial data acquisition and remote monitoring sites. An attacker who can reach the device over the network can crash the service without logging in. Teams without ADAM-3600 devices, or with devices isolated from untrusted networks, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| ADAM-3600 EdgeLink | vendor | < 2.8.5.0 | 2.8.5.0 |
2.8.5.0 are affected2.8.5.0 or later (vendor patched 2026-10-15)2.8.5.1 for directory restrictions; the latest release covers bothEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
This page as .md · .json · in your agent: get_signal("CVE-2026-43853")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.