CVE-2026-43854: Medium severity EdgeLink vulnerability
Published Oct 20, 2026
·Updated
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
Affected Software
1 affected component
EdgeLink
Event History
Oct 20, 2026
CVE Published
via MITRE·09:12 AM
Data Sourced
via MITRE·09:12 AM
RemedyDescription
Data Sourced
via NVD·10:17 AM
DescriptionSeverity
Frequently Asked Questions
1
Who is exposed to this issue?
Organizations using EdgeLink-enabled devices are exposed if an attacker can obtain access to an encrypted project file associated with those devices.
2
What does an attacker need to exploit the vulnerability?
The attacker needs access to an encrypted project file. The available information does not state that network access alone is sufficient.
3
What could an attacker obtain if exploitation succeeds?
Successful exploitation could allow retrieval of administrator credentials for EdgeLink-enabled devices.