CVE-2026-43829 - Vulnerability Details - OpenCVE

Full details and mitigation steps are currently restricted and will be published at a later date.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00245.

Exploitation none

Automatable yes

Technical Impact partial

No data.

No data.

No data.

No data.

References

Link	Providers
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-xxx

History

Fri, 31 Jul 2026 21:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-121
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Fri, 31 Jul 2026 06:30:00 +0000

Type	Values Removed	Values Added
Description	Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the password functionality to conduct code execution when the SafeEnhancement feature is enabled.	Full details and mitigation steps are currently restricted and will be published at a later date.
Title	Stack-based Buffer Overflow Vulnerability	tbc
References	https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-097	https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-xxx
Metrics	cvssV4_0 `{'score': 9.2, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

Fri, 31 Jul 2026 04:15:00 +0000

Type	Values Removed	Values Added
Description		Successful exploitation of the vulnerability could allow an unauthenticated attacker to exploit a stack-based buffer overflow in the password functionality to conduct code execution when the SafeEnhancement feature is enabled.
Title		Stack-based Buffer Overflow Vulnerability
References		https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-097
Metrics		cvssV4_0 `{'score': 9.2, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}`

MITRE

Status: PUBLISHED

Assigner: CSA

Published: 2026-07-31T02:48:23.886Z

Updated: 2026-07-31T19:48:20.994Z

Reserved: 2026-05-04T03:13:26.241Z

Link: CVE-2026-43829

Vulnrichment

Updated: 2026-07-31T19:47:01.699Z

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43829", "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "state": "PUBLISHED", "assignerShortName": "CSA", "dateReserved": "2026-05-04T03:13:26.241Z", "datePublished": "2026-07-31T02:48:23.886Z", "dateUpdated": "2026-07-31T19:48:20.994Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "shortName": "CSA", "dateUpdated": "2026-07-31T05:18:51.668Z"}, "title": "tbc", "datePublic": "2026-07-31T02:41:00.000Z", "affected": [{"vendor": "tbc", "product": "tbc", "versions": [{"status": "affected", "version": "tbc"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "Full details and mitigation steps are currently restricted and will be published at a later date.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Full details and mitigation steps are currently restricted and will be published at a later date."}]}], "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-xxx"}], "solutions": [{"lang": "en", "value": "Advantech,\nthe product owner, has rolled out fixes for all reported vulnerabilities. Users\nand administrators of affected product versions are advised to update to the\nlatest version.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Advantech,\nthe product owner, has rolled out fixes for all reported vulnerabilities. Users\nand administrators of affected product versions are advised to update to the\nlatest version."}]}], "credits": [{"lang": "en", "value": "tbc", "type": "finder"}, {"lang": "en", "value": "tbc1", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-121", "lang": "en", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-07-31T19:47:40.588661Z", "id": "CVE-2026-43829", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T19:48:20.994Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-43829", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-31T19:47:40.588661Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-31T19:47:01.699Z"}}], "cna": {"title": "tbc", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "tbc"}, {"lang": "en", "type": "finder", "value": "tbc1"}], "affected": [{"vendor": "tbc", "product": "tbc", "versions": [{"status": "affected", "version": "tbc"}], "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "Advantech,\nthe product owner, has rolled out fixes for all reported vulnerabilities. Users\nand administrators of affected product versions are advised to update to the\nlatest version.", "supportingMedia": [{"type": "text/html", "value": "Advantech,\nthe product owner, has rolled out fixes for all reported vulnerabilities. Users\nand administrators of affected product versions are advised to update to the\nlatest version.", "base64": false}]}], "datePublic": "2026-07-31T02:41:00.000Z", "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-xxx"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "Full details and mitigation steps are currently restricted and will be published at a later date.", "supportingMedia": [{"type": "text/html", "value": "Full details and mitigation steps are currently restricted and will be published at a later date.", "base64": false}]}], "providerMetadata": {"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "shortName": "CSA", "dateUpdated": "2026-07-31T05:18:51.668Z"}}}, "cveMetadata": {"cveId": "CVE-2026-43829", "state": "PUBLISHED", "dateUpdated": "2026-07-31T19:48:20.994Z", "dateReserved": "2026-05-04T03:13:26.241Z", "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "datePublished": "2026-07-31T02:48:23.886Z", "assignerShortName": "CSA"}, "dataVersion": "5.2"}