IoT Edge Windows vulnerabilities

2 known vulnerabilities in IoT Edge Windows from Advantech. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  SaaS Composer: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-6888May 13, 2026Advantech

  Successful exploitation of the SQL injection vulnerability could allow a remote authenticated attacker to execute arbitrary commands via a specific interface, potentially enabling the attacker to access, modify, or delete sensitive information within the datab

• 9.8 Critical severity

  IoTSuite and IoT Edge Products: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-52694Jan 12, 2026AdvantechEPSS 39.9%

  Successful exploitation of the SQL injection vulnerability could allow an unauthenticated remote attacker to execute arbitrary SQL commands on the vulnerable service when it is exposed to the Internet, potentially affecting data confidentiality, integrity, and