CVE-2026-43842

Medium

Description

A NULL pointer dereference vulnerability in the license manager service could allow an unauthenticated attacker to crash the service via the rpc_rx_fsm function when msglen is set to 0.

SeverityMedium

CVSS6.9

Exploit probability—

ProductADAM-3600

PublishedOct 20, 2026

First seenOct 20, 2026

Weakness typeCWE-476NULL pointer dereference

How to fix

Vendor advisories

advantech.com/en/security-advisory

Affected products

Product	Affected versions	Fixed in
Advantech ADAM-3600	prior to version 2.8.5.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.