Advantech ADAM-3600 Authentication Bypass Vulnerability Rated Critical by NVD
The National Vulnerability Database rates a new flaw in Advantech ADAM-3600 firmware as critical, allowing attackers to bypass the authentication mechanism on older units.
Key points
- CVE-2026-43844 allows authentication bypass via a proprietary protocol flaw.
- The vulnerability affects Advantech ADAM-3600 devices running firmware prior to version 2.8.5.0.
- The National Vulnerability Database assigns the flaw a CVSS score of 9.3, classifying it as critical.
The National Vulnerability Database has published a new critical vulnerability affecting Advantech ADAM-3600 industrial automation units. The flaw, identified as CVE-2026-43844, allows attackers to bypass the device’s authentication mechanism. This issue impacts systems running firmware versions prior to 2.8.5.0.
At a glance
- CVE
- CVE-2026-43844
- Product
- Advantech ADAM-3600
- CVSS
- 9.3 Critical
- Weakness
- —
- Exploited
- No known exploitation
The vulnerability stems from a weakness in the proprietary protocol used by the hardware. According to the NVD record, an attacker can exploit this flaw to bypass the authentication mechanism. The National Vulnerability Database assigns the issue a CVSS score of 9.3, which falls into the critical severity range.
Context and Background
This disclosure follows recent security issues identified in the same product line. As Threat Times reported on October 20, 2026, researchers found a critical remote code execution flaw in older Advantech ADAM-3600 firmware. That earlier finding allowed attackers to execute arbitrary commands with maximum privileges by sending forged packets.
Additionally, Threat Times reported on the same date that a stack-based buffer overflow existed in the login feature of these units. That separate vulnerability posed a critical risk of code execution for unpatched systems. The current authentication bypass adds another layer of risk for operators who have not yet updated their devices.
Who Is Affected
The vulnerability specifically affects Advantech ADAM-3600 units. The NVD record states that any device running firmware prior to version 2.8.5.0 is vulnerable. Organizations using these industrial automation modules for data acquisition or control should verify their current firmware versions.
Devices running version 2.8.5.0 or later are not affected by this specific authentication bypass. However, operators should ensure their systems are fully updated to mitigate this risk.
What should you do?
Security teams should immediately inventory their environment to identify any Advantech ADAM-3600 units. They must check the firmware version on each device to determine if it is older than 2.8.5.0. If vulnerable units are found, they should be isolated from untrusted networks until updates are applied.
What to do and how to stay safe: Advantech
- Inventory all industrial control systems to identify Advantech ADAM-3600 units and check their firmware versions against the affected list.
- Isolate vulnerable devices from external networks or untrusted segments to prevent exploitation of the authentication bypass.
- Monitor network traffic for unusual protocol activity that may indicate attempts to bypass authentication on these devices.
- Prepare to apply firmware updates once the vendor releases patches for version 2.8.5.0 or later to remediate the flaw.
Step-by-step guide: Risk-Based Vulnerability Management: Prioritize Fixes by Actual Danger
General security guidance from the Threat Times newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is CVE-2026-43844?
It is a critical vulnerability in Advantech ADAM-3600 firmware that allows attackers to bypass the authentication mechanism via a proprietary protocol flaw.
Which versions of Advantech ADAM-3600 are affected?
The vulnerability affects Advantech ADAM-3600 units running firmware prior to version 2.8.5.0.
How severe is this vulnerability?
The National Vulnerability Database rates it as critical with a CVSS score of 9.3.
