CVE-2026-43846
Deferred Deferred - Pending Action

Stack-Based Buffer Overflow in Unused Feature

Vulnerability report for CVE-2026-43846, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: CSA

Description

A stack-based buffer overflow vulnerability in a non-functional feature could allow an authenticated attacker to achieve code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-11-09
AI Q&A
2026-10-20
EPSS Evaluated
2026-11-08
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Advantech ADAM-3600 prior to version 2.8.5.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a stack-based buffer overflow vulnerability in a non-functional feature. It allows an authenticated attacker to execute arbitrary code by exploiting improper bounds checking in the stack memory.

Detection Guidance

Detection of this stack-based buffer overflow vulnerability may require code review or fuzzing of the non-functional feature. No specific commands are provided in the context. Monitor for crashes or unexpected behavior in the affected system.

Impact Analysis

An attacker could gain control of the affected system, leading to unauthorized access, data theft, or disruption of services. Since it requires authentication, the risk is higher if credentials are compromised.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations may face penalties for non-compliance.

Mitigation Strategies

Disable the non-functional feature if possible. Apply vendor patches or updates if available. Restrict authenticated user access to only necessary functions. Monitor network traffic for unusual activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-43846. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...