Skip to content
Asustor vulnerabilities
Newest
-
asustor inc. adm, asustor data master +1 more
A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM
CVE-2026-67248
8.7 High
-
asustor inc. adm, asustor data master +1 more
A path traversal vulnerability was found in the IHM Log handling of ADM
CVE-2026-67247
7.1 High
-
asustor inc. adm, asustor data master +1 more
A path traversal vulnerability was found in the Wallpaper component of ADM
CVE-2026-67246
6.9 Medium
-
asustor inc. adm, asustor data master +1 more
A path traversal vulnerability was found in the VPN Clients on the ADM
CVE-2026-67245
7.0 High
-
asustor inc. adm, asustor data master +1 more
A format string vulnerability was found in the Notification OAuth settings of ADM
CVE-2026-67244
8.6 High
-
asustor inc. adm, asustor data master +1 more
A format string vulnerability was found in the Rsync Backup on the ADM
CVE-2026-18188
7.1 High
-
asustor inc. adm, asustor data master +1 more
A format string vulnerability was found in the Internal Backup on the ADM
CVE-2026-18187
7.1 High
-
asustor inc. adm, asustor data master +1 more
A stored format string vulnerability was found in the FTP Backup on the ADM
CVE-2026-18186
7.1 High
-
asustor inc. adm, asustor data master +1 more
A command injection vulnerability was found in the PPTP VPN Clients on the ADM
CVE-2026-6644
Public exploit
9.4 Critical
-
asustor inc. adm, asustor data master +1 more
A stack-based buffer overflow vulnerability in the VPN Clients on the ADM
CVE-2026-6643
Public exploit
8.6 High
-
asustor adm, data master +1 more
A path traversal vulnerability was found in the FTP Backup on the ADM.
CVE-2026-3179
9.2 Critical
-
asustor adm, data master +1 more
An improper certificate validation vulnerability was found in the FTP Backup on the ADM.
CVE-2026-3100
8.3 High
-
asustor adm, data master +1 more
An improper input validation vulnerability was found in ADM while joining a AD Domain.
CVE-2026-24936
9.5 Critical
-
asustor adm, data master +1 more
An improper certificate validation vulnerability was found in a third-party NAT traversal module.
CVE-2026-24935
6.3 Medium
-
asustor adm, data master +1 more
An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.
CVE-2026-24934
6.3 Medium
-
asustor adm, data master +1 more
An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.
CVE-2026-24933
8.9 High
-
asustor adm, data master +1 more
An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.
CVE-2026-24932
8.9 High
-
asustor adm, data master +1 more
A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM
CVE-2025-13053
7.0 High
-
asustor adm, data master +1 more
An improper certificates validation vulnerability was found in the Notification settings of ADM
CVE-2025-13052
7.0 High
-
asustor abp and aes
Windows service used an uncontrolled search path element will cause unauthorized code execution with localsystem privileges
CVE-2025-13051
9.3 Critical
-
asustor abp and aes
Windows service registered with an unquoted ImagePath vulnerability in the system registry
CVE-2025-8070
9.2 Critical
-
asustor adm
An improper access control vulnerability was found in the EZ Sync Manager of ADM
CVE-2025-7699
7.1 High
-
asustor adm
A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM
CVE-2025-7618
4.8 Medium
-
asustor adm
A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM
CVE-2025-7380
4.8 Medium
-
asustor adm
A security bypass vulnerability was found in DataSync Center installed on ADM
CVE-2025-7379
5.2 Medium
-
asustor adm
An improper input validation vulnerability was found on manipulating configuration of ADM
CVE-2025-7378
6.0 Medium
-
asustor adm, data master +1 more
An Arbitrary File Movement vulnerability was found on the ADM
CVE-2023-4475
7.5 High
-
asustor adm, data master +1 more
An Improper Privilege Management vulnerability was found on the ADM
CVE-2023-3699
8.7 High
-
asustor adm, data master +1 more
A Command injection vulnerability was found on Printer service of ADM
CVE-2023-3698
8.5 High
-
asustor adm, data master +1 more
A Command injection vulnerability was found on Printer service of ADM
CVE-2023-3697
8.5 High
-
asustor adm, data master +1 more
A Command injection vulnerability was found on Printer service of ADM
CVE-2023-2910
8.8 High
-
asustor adm
A Directory traversal vulnerability was found on EZ Sync service of ADM
CVE-2023-2909
8.5 High
-
asustor download center
A Gain Information vulnerability was found on Download Center.
CVE-2023-2749
8.6 High
-
asustor adm, looksgood, soundsgood +2 more
A Cross-Site Scripting(XSS) vulnerability was found on ADM
CVE-2023-2509
7.1 High
-
asustor adm
A stack-based buffer overflow vulnerability was found in the ADM
CVE-2023-30770
7.1 High
-
asustor adm
A stack-based buffer overflow vulnerability was found on ADM
CVE-2022-37398
7.1 High
-
asustor exfat driver
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license...
CVE-2019-11689
8.1 High
-
asustor exfat driver
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license...
CVE-2019-11688
7.4 High
-
asustor data master
Denial-of-service in the login page of ASUSTOR ADM 3.1.1 allows attackers to prevent users from...
CVE-2018-12319
7.5 High
-
asustor data master
Information disclosure in the SNMP settings page in ASUSTOR ADM version 3.1.1 allows attackers to...
CVE-2018-12318
8.8 High
-
asustor data master
OS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system...
CVE-2018-12317
8.8 High
-
asustor data master
OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute...
CVE-2018-12316
8.8 High
-
asustor data master
Missing verification of a password in ASUSTOR ADM version 3.1.1 allows attackers to change...
CVE-2018-12315
6.5 Medium
-
asustor data master
Directory Traversal in downloadwallpaper.cgi in ASUSTOR ADM version 3.1.1 allows attackers to...
CVE-2018-12314
7.5 High
-
asustor data master
OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system...
CVE-2018-12313
9.8 Critical
-
asustor data master
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system...
CVE-2018-12312
8.8 High
-
asustor data master
Cross-site scripting vulnerability in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers...
CVE-2018-12311
5.4 Medium
-
asustor data master
Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute...
CVE-2018-12310
5.4 Medium
-
asustor data master
Directory Traversal in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to upload files...
CVE-2018-12309
7.5 High
-
asustor data master
Encryption key disclosure in share.cgi in ASUSTOR ADM version 3.1.1 allows attackers to obtain...
CVE-2018-12308
6.5 Medium
- Show olderLoading…