CVE-2025-52694
Critical
Description
Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and availability. Users and administrators of affected product versions are advised to update to the latest versions immediately.
SeverityCritical
CVSS10.0
Exploit probability—
ProductAdvantech Iot Edge Linux Docker
PublishedJan 12, 2026
First seenJan 12, 2026
Weakness typeCWE-89SQL injection
How to fix
Update
- advantech iot_edge_linux_docker2.0.2 or later
- advantech iot_edge_windows2.0.2 or later
- advantech iotsuite_growth_linux_docker2.0.2 or later
- advantech iotsuite_saas_composer3.4.15 or later
- advantech iotsuite_starter_linux_docker2.0.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| advantech iot_edge_linux_docker | v < 2.0.2 | 2.0.2 |
| advantech iot_edge_windows | v < 2.0.2 | 2.0.2 |
| advantech iotsuite_growth_linux_docker | v < 2.0.2 | 2.0.2 |
| advantech iotsuite_saas_composer | v < 3.4.15 | 3.4.15 |
| advantech iotsuite_starter_linux_docker | v < 2.0.2 | 2.0.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.