2
CVEs
0
Critical
2
High
0
KEV
2
PoC
0
Unpatched C/H
100.0%
Patch Rate
2.5%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
2
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
Webaccess
94
R Seenet
40
Advantech Webaccess
38
Iview
36
Webaccess Scada
30
Eki 6333Ac 2G Firmware
20
Eki 6333Ac 2Gd Firmware
20
Eki 6333Ac 1Gpo Firmware
20
Webaccess Nms
20
Webaccess Hmi Designer
18
Webaccess Vpn
12
Webaccess Dashboard
11
Wise Deviceon Server
11
PHP
8
Wise 4050lan Firmware
8
Wise 4010lan Firmware
8
Wise 4060lan Firmware
8
Eki 1524 Firmware
5
Eki 1522 Firmware
5
Eki 1521 Firmware
5
Wise Paas Rmm
5
Adam 3600 Edgelink
5
Deviceon Iedge
4
Adam 5630 Firmware
3
Susiaccess
3
Wise 6610 Jb
2
Wise 6610 El Cb
2
Wise 6610P Dna
2
Iot Edge Linux Docker
2
Wise 6610 El Eb
2
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-79697 | Command injection in Advantech WISE-6610 LoRaWAN gateway firmware 1.2.1_20251110 allows a remote low-privileged attacker to execute arbitrary OS commands by manipulating the act parameter in the Basic Station Certificate-Deletion Handler (basicstation_apply function). All 13 WISE-6610 hardware variants are affected, spanning NB, EB, TB, JB, CB, EL-series, and P-series models deployed in industrial IoT environments. A public proof-of-concept exploit has been disclosed; upgrading to firmware 1.2.4_20260821 resolves the issue. | HIGH | 8.6 | 3.4% | 66 |
PoC
|
| CVE-2026-79698 | Command injection in Advantech WISE-6610 series industrial IoT gateways allows a remotely authenticated attacker with low privileges to execute arbitrary OS commands via the Node-RED Library's nodered_lib_apply function. All thirteen WISE-6610 firmware variants at version 1.2.1_20251110 are confirmed affected, and a public exploit is available. Advantech has released firmware 1.2.4_20260821 as the fix, with no active exploitation (CISA KEV) confirmed at time of analysis. | HIGH | 8.6 | 1.7% | 65 |
PoC
|