Key points
- CVE-2026-43851 is rated High severity with a CVSS score of 8.2.
- The flaw allows an authenticated attacker to read arbitrary files via path traversal.
- Advantech released version 2.8.5.0 to fix the vulnerability in the ADAM-3600.
Advantech has released version 2.8.5.0 of its ADAM-3600 industrial automation device to address a high-severity security flaw. The update resolves CVE-2026-43851, a path traversal vulnerability that affects all versions prior to the patched release. Security teams managing these devices should verify their current software versions immediately to determine if they are exposed to unauthorized file access.
In plain English
Path traversal flaws occur when an application fails to properly validate user input. An attacker can manipulate file paths to access areas of the system they should not reach. In this case, the vulnerability allows someone with a valid login to read arbitrary files on the device. This could expose sensitive configuration data or credentials stored on the system.
The background
The National Vulnerability Database assigned CVE-2026-43851 to this issue. The flaw is rated High severity with a CVSS score of 8.2. It specifically impacts the Advantech ADAM-3600 series. As Vuln Post reported on 2026-10-20, this device series has faced other high-severity issues, including an unauthenticated crash flaw in its logging system.
What changes now
Users running versions older than 2.8.5.0 are at risk. The vendor has provided a specific update to close this security gap. Installing version 2.8.5.0 removes the ability for authenticated users to traverse directory structures and read unauthorized files. Organizations must apply this patch to maintain the integrity of their industrial control environments.
Who needs to act first
Teams usually prioritize systems exposed to networks where authenticated access is possible. Check whether any ADAM-3600 units are reachable from semi-trusted zones. Back up current configurations before applying updates to ensure rollback capability. Test the patch in a staging environment first to verify operational stability. Monitor logs for unusual file access attempts while rolling out the fix across production assets.
What to do and how to stay safe: Advantech
- Audit your inventory to identify all Advantech ADAM-3600 devices running versions prior to 2.8.5.0.
- Apply the 2.8.5.0 update to affected devices as soon as maintenance windows allow.
- Review access logs for any suspicious file read attempts from authenticated accounts.
- Ensure that strong authentication policies are enforced to limit the pool of potential attackers.
Step-by-step guide: 7 Configuration Errors That Expose Systems to Zero-Day Exploits
General security guidance from the Vuln Post newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is CVE-2026-43851?
It is a path traversal vulnerability in Advantech ADAM-3600 devices that allows authenticated attackers to read arbitrary files.
Is there a fix available?
Yes, Advantech released version 2.8.5.0 to resolve the vulnerability.
What is the severity of this flaw?
The National Vulnerability Database rates it as High with a CVSS score of 8.2.
