Advantech IoT Edge Windows vulnerabilities

2 CVEs affecting Advantech IoT Edge Windows, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-6888, published 2026-05-13.

More from Advantech.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-52694, published 2026-01-12. Critical severity, CVSS 9.8. EPSS: 39.9% chance of exploitation in the next 30 days. Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the…
• CVE-2026-6888, published 2026-05-13. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to…