CVE-2026-73174

Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a network-adjacent passive observer to intercept management traffic and recover sensitive device identity and network metadata in cleartext.

  • Published Sep 16, 2026
  • CVSS 8.7 high
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-73174 at the National Vulnerability Database