High severityNVD Advisory· Published Oct 20, 2026

CVE-2026-43835

Description

A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.

Affected products

Advantech/firmware upgrade functionalityllm-create

Patches

Vulnerability mechanics

References

www.advantech.com/en/security-advisorynvd
www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-149nvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000