Advantech
- Total products in the ecosystem
- 35
- Total vulnerabilities (90 days)
- 4
en
Verify to analyze this security profile
As of 09/14/2026, Advantech recorded 4 security vulnerabilities in the last 90 days across 15 products, including 4 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, WISE-6610-CB had the most security vulnerabilities in the Advantech ecosystem, with 2 vulnerabilities—approximately 50% of the provider's total vulnerabilities during this period.
| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-79698Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection | Exploitation statusPublic exploit | FixYes | Affected productWISE-6610-NB | Published09/07/2026 | SeverityCritical |
CVE-2026-79697Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection | Exploitation statusPublic exploit | FixYes | Affected productWISE-6610-NB | Published09/07/2026 | SeverityCritical |
CVE-2026-43833tbc | Exploitation statusNot known exploited | FixYes | Affected producttbc | Published07/31/2026 | SeverityMedium |
CVE-2026-43832tbc | Exploitation statusNot known exploited | FixYes | Affected producttbc | Published07/31/2026 | SeverityHigh |
CVE-2026-43831tbc | Exploitation statusNot known exploited | FixYes | Affected producttbc | Published07/31/2026 | SeverityHigh |
CVE-2026-43830tbc | Exploitation statusNot known exploited | FixYes | Affected producttbc | Published07/31/2026 | SeverityCritical |
CVE-2026-43829tbc | Exploitation statusNot known exploited | FixYes | Affected producttbc | Published07/31/2026 | SeverityHigh |
CVE-2026-6890 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/31/2026 | SeverityUnknown |
CVE-2026-6889 | Exploitation statusNot confirmed | FixNot confirmed | Affected productNot confirmed | Published07/31/2026 | SeverityUnknown |
CVE-2026-14162Advantech|Hospital Quering Management - Missing Authentication | Exploitation statusNot known exploited | FixYes | Affected productHospital Quering Management | Published06/30/2026 | SeverityCritical |
CVE-2026-14161Advantech|Hospital Queuing Management - Sensitive Data Exposure | Exploitation statusNot known exploited | FixYes | Affected productHospital Queuing Management | Published06/30/2026 | SeverityHigh |
CVE-2026-6888SQL Injection Vulnerability | Exploitation statusNot known exploited | FixYes | Affected productSaaS Composer | Published05/13/2026 | SeverityHigh |
CVE-2026-2670Advantech WISE-6610-NB Background Management openvpn_apply os command injection | Exploitation statusPublic exploit | FixYes | Affected productWISE-6610-NB | Published02/18/2026 | SeverityHigh |
CVE-2025-52694Execution of arbitrary SQL commands | Exploitation statusNot known exploited | FixYes | Affected productIoTSuite and IoT Edge Products | Published01/12/2026 | SeverityCritical |
CVE-2025-67653Advantech WebAccess/SCADA Path Traversal | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/SCADA | Published12/18/2025 | SeverityMedium |
CVE-2025-46268Advantech WebAccess/SCADA SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/SCADA | Published12/18/2025 | SeverityMedium |
CVE-2025-14848Advantech WebAccess/SCADA Absolute Path Traversal | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/SCADA | Published12/18/2025 | SeverityMedium |
CVE-2025-14849Advantech WebAccess/SCADA Unrestricted Upload of File with Dangerous Type | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/SCADA | Published12/18/2025 | SeverityHigh |
CVE-2025-14850Advantech WebAccess/SCADA Improper Limitation of a Pathname to a Restricted Directory | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/SCADA | Published12/18/2025 | SeverityHigh |
CVE-2025-14252 | Exploitation statusNot known exploited | FixYes | Affected productSUSI | Published12/16/2025 | SeverityHigh |
CVE-2025-34256Advantech WISE-DeviceOn Server < 5.4 Hard-coded JWT Key Authentication Bypass | Exploitation statusPublic exploit | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityCritical |
CVE-2025-34265Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via rule-engines | Exploitation statusNot known exploited | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityMedium |
CVE-2025-34263Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/dashboards/menus | Exploitation statusNot known exploited | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityMedium |
CVE-2025-34266Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via plugin-config/addins/menus | Exploitation statusNot known exploited | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityMedium |
CVE-2025-34264Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via dog/{agentId} | Exploitation statusNot known exploited | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityMedium |
CVE-2025-34262Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devices/name/{agent_id} | Exploitation statusNot known exploited | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityMedium |
CVE-2025-34258Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/plan | Exploitation statusNot known exploited | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityMedium |
CVE-2025-34259Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicemap/building | Exploitation statusNot known exploited | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityMedium |
CVE-2025-34261Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via devicegroups/ | Exploitation statusNot known exploited | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityMedium |
CVE-2025-34260Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/schedule | Exploitation statusNot known exploited | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityMedium |
CVE-2025-34257Advantech WISE-DeviceOn Server < 5.4 Authenticated Stored XSS via action/defined | Exploitation statusNot known exploited | FixYes | Affected productWISE-DeviceOn Server | Published12/05/2025 | SeverityMedium |
CVE-2025-13373Advantech iView SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productiView | Published12/04/2025 | SeverityHigh |
CVE-2025-58423Advantech DeviceOn/iEdge Path Traversal | Exploitation statusNot known exploited | FixYes | Affected productDeviceOn/iEdge | Published11/06/2025 | SeverityHigh |
CVE-2025-59171Advantech DeviceOn/iEdge Path Traversal | Exploitation statusNot known exploited | FixYes | Affected productDeviceOn/iEdge | Published11/06/2025 | SeverityHigh |
CVE-2025-62630Advantech DeviceOn/iEdge Path Traversal | Exploitation statusNot known exploited | FixYes | Affected productDeviceOn/iEdge | Published11/06/2025 | SeverityHigh |
CVE-2025-64302Advantech DeviceOn/iEdge Cross-site Scripting | Exploitation statusNot known exploited | FixYes | Affected productDeviceOn/iEdge | Published11/06/2025 | SeverityMedium |
CVE-2022-50595Advantech iView < v5.7.04 Build 6425 ztp_search_value Parameter SQL Injection RCE | Exploitation statusNot known exploited | FixYes | Affected productiView | Published11/06/2025 | SeverityCritical |
CVE-2022-50591Advantech iView < v5.7.04 Build 6425 ztp_config_id Parameter SQL Injection Information Disclosure | Exploitation statusNot known exploited | FixYes | Affected productiView | Published11/06/2025 | SeverityHigh |
CVE-2022-50593Advantech iView < v5.7.04 Build 6425 search_term Parameter SQL Injection RCE | Exploitation statusNot known exploited | FixYes | Affected productiView | Published11/06/2025 | SeverityCritical |
CVE-2022-50592Advantech iView < v5.7.04 Build 6425 getInventoryReportData Parameter SQL Injection RCE | Exploitation statusNot known exploited | FixYes | Affected productiView | Published11/06/2025 | SeverityCritical |
CVE-2022-50594Advantech iView < v5.7.04 Build 6425 data Parameter SQL Injection Information Disclosure | Exploitation statusNot known exploited | FixYes | Affected productiView | Published11/06/2025 | SeverityHigh |
CVE-2025-34247Advantech WebAccess/VPN < 1.1.5 SQL Injection via NetworksController.addNetworkAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityMedium |
CVE-2025-34246Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxPrevalidationController.ajaxAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityMedium |
CVE-2025-34245Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxStandaloneVpnClientsController.ajaxAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityMedium |
CVE-2025-34244Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxDeviceFwRulesAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityMedium |
CVE-2025-34243Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxFwRulesController.ajaxNetworkFwRulesAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityMedium |
CVE-2025-34242Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxNetworkController.ajaxAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityHigh |
CVE-2025-34241Advantech WebAccess/VPN < 1.1.5 SQL Injection via AjaxDeviceController.ajaxDeviceAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityMedium |
CVE-2025-34240Advantech WebAccess/VPN < 1.1.5 SQL Injection via AppManagementController.appUpgradeAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityHigh |
CVE-2025-34239Advantech WebAccess/VPN < 1.1.5 Command Injection in AppManagementController.appUpgradeAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityHigh |
CVE-2025-34238Advantech WebAccess/VPN < 1.1.5 Path Traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityMedium |
CVE-2025-34237Advantech WebAccess/VPN < 1.1.5 Stored XSS via StandaloneVpnClientsController.addStandaloneVpnClientAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityMedium |
CVE-2025-34236Advantech WebAccess/VPN < 1.1.5 Stored XSS via NetworksController.addNetworkAction() | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/VPN | Published11/06/2025 | SeverityMedium |
CVE-2025-53509Advantech iView Argument Injection | Exploitation statusNot known exploited | FixYes | Affected productiView | Published07/10/2025 | SeverityHigh |
CVE-2025-52459Advantech iView Argument Injection | Exploitation statusNot known exploited | FixYes | Affected productiView | Published07/10/2025 | SeverityHigh |
CVE-2025-53515Advantech iView SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productiView | Published07/10/2025 | SeverityHigh |
CVE-2025-52577Advantech iView SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productiView | Published07/10/2025 | SeverityHigh |
CVE-2025-53475Advantech iView SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productiView | Published07/10/2025 | SeverityHigh |
CVE-2025-46704Advantech iView Path Traversal | Exploitation statusNot known exploited | FixYes | Affected productiView | Published07/10/2025 | SeverityMedium |
CVE-2025-48891Advantech iView SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productiView | Published07/10/2025 | SeverityHigh |
CVE-2025-41442Advantech iView Cross-site Scripting | Exploitation statusNot known exploited | FixYes | Affected productiView | Published07/10/2025 | SeverityMedium |
CVE-2025-53519Advantech iView Cross-site Scripting | Exploitation statusNot known exploited | FixYes | Affected productiView | Published07/10/2025 | SeverityMedium |
CVE-2025-53397Advantech iView Cross-site Scripting | Exploitation statusNot known exploited | FixYes | Affected productiView | Published07/10/2025 | SeverityMedium |
CVE-2025-48470Stored Cross site Scripting (XSS) | Exploitation statusNot known exploited | FixYes | Affected productAdvantech Wireless Sensing and Equipment (WISE) | Published06/24/2025 | SeverityMedium |
CVE-2025-48469Unauthenticated Firmware Upload | Exploitation statusNot known exploited | FixNot confirmed | Affected productAdvantech Wireless Sensing and Equipment (WISE) | Published06/24/2025 | SeverityCritical |
CVE-2025-48468Open JTAG Debug Port | Exploitation statusNot known exploited | FixYes | Affected productAdvantech Wireless Sensing and Equipment (WISE) | Published06/24/2025 | SeverityMedium |
CVE-2025-48467Denial of Service via Malformed Modbus Packets | Exploitation statusNot known exploited | FixYes | Affected productAdvantech Wireless Sensing and Equipment (WISE) | Published06/24/2025 | SeverityMedium |
CVE-2025-48466Modbus Command Injection without Authentication | Exploitation statusPublic exploit | FixYes | Affected productAdvantech Wireless Sensing and Equipment (WISE) | Published06/24/2025 | SeverityHigh |
CVE-2025-48463Unencrypted HTTP Communication | Exploitation statusNot known exploited | FixYes | Affected productAdvantech Wireless Sensing and Equipment (WISE) | Published06/24/2025 | SeverityLow |
CVE-2025-48462Login Session Exhaustion | Exploitation statusNot known exploited | FixYes | Affected productAdvantech Wireless Sensing and Equipment (WISE) | Published06/24/2025 | SeverityMedium |
CVE-2025-48461Weak Session Cookie Entropy | Exploitation statusNot known exploited | FixYes | Affected productAdvantech Wireless Sensing and Equipment (WISE) | Published06/24/2025 | SeverityMedium |
CVE-2024-50377 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityMedium |
CVE-2024-50376 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50375 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityCritical |
CVE-2024-50374 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityCritical |
CVE-2024-50373 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityCritical |
CVE-2024-50372 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityCritical |
CVE-2024-50371 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityCritical |
CVE-2024-50370 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityCritical |
CVE-2024-50369 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50368 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50367 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50366 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50365 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50364 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50363 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50362 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50361 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50360 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50359 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2024-50358 | Exploitation statusNot known exploited | FixYes | Affected productEKI-6333AC-2G | Published11/26/2024 | SeverityHigh |
CVE-2023-52335Advantech iView ConfigurationServlet SQL Injection Information Disclosure Vulnerability | Exploitation statusNot known exploited | FixNot confirmed | Affected productiView | Published11/22/2024 | SeverityHigh |
CVE-2024-39364Advantech ADAM-5630 Missing Authentication for Critical Function | Exploitation statusNot known exploited | FixYes | Affected productADAM-5630 | Published09/27/2024 | SeverityHigh |
CVE-2024-34542Advantech ADAM-5630 Weak Encoding for Password | Exploitation statusNot known exploited | FixYes | Affected productADAM-5630 | Published09/27/2024 | SeverityMedium |
CVE-2024-28948Advantech ADAM-5630 Cross-Site Request Forgery | Exploitation statusNot known exploited | FixYes | Affected productADAM-5630 | Published09/27/2024 | SeverityHigh |
CVE-2024-39275Advantech ADAM-5630 Use of Persistent Cookies Containing Sensitive Information | Exploitation statusNot known exploited | FixYes | Affected productADAM-5630 | Published09/27/2024 | SeverityHigh |
CVE-2024-38308Advantech ADAM-5550 Cross-site Scripting | Exploitation statusNot known exploited | FixYes | Affected productADAM 5550 | Published09/27/2024 | SeverityHigh |
CVE-2024-37187Advantech ADAM-5550 Weak Encoding for Password | Exploitation statusNot known exploited | FixYes | Affected productADAM 5550 | Published09/27/2024 | SeverityMedium |
CVE-2024-2453Advantech WebAccess/SCADA SQL Injection | Exploitation statusNot known exploited | FixYes | Affected productWebAccess/SCADA | Published03/21/2024 | SeverityMedium |
CVE-2023-5642Advantech R-SeeNet Unauthenticated Read/Write | Exploitation statusPublic exploit | FixYes | Affected productR-SeeNet | Published10/18/2023 | SeverityCritical |
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan