Live › vulnerability › CVE-2026-43856
Go to dashboardStack-based buffer overflow in FileProcess::CheckDir on Advantech ADAM-3600 EdgeLink remote terminal units. An authenticated remote user (high privileges) sending a path over 1024 bytes can get code execution on the device. It is one of about 30 CVEs fixed in the same Advantech advisory.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|
| ADAM-3600 EdgeLink | vendor | < 2.8.5.0 | 2.8.5.0 |
2.8.5.0 is affected2.8.5.0 or later (note the vendor mentions 2.8.5.1 for other fixes in the same advisory; prefer the latest release from Advantech)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
This page as .md · .json · in your agent: get_signal("CVE-2026-43856")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.