Skip to contentAsustor Inc. vulnerabilities
Newest
- abpframework abpABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File EndpointsCVE-2026-125753Public exploit8.2 High
- abpframework abpABP Framework before 10.7.1 Authentication Bypass via External Login ProviderCVE-2026-123618Public exploit7.6 High
- asustor inc. admAn HTTP header injection vulnerability was found in the ADMCVE-2026-1053249.2 Critical
- altium aes, asustor inc. abp +1 moreAn improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.CVE-2026-187598.5 High
- asustor inc. adm, asustor data master +1 moreA stack-based buffer overflow vulnerability was found in the File Explorer on the ADMCVE-2026-672488.7 High
- asustor inc. adm, asustor data master +1 moreA path traversal vulnerability was found in the IHM Log handling of ADMCVE-2026-672477.1 High
- asustor inc. adm, asustor data master +1 moreA path traversal vulnerability was found in the Wallpaper component of ADMCVE-2026-672466.9 Medium
- asustor inc. adm, asustor data master +1 moreA path traversal vulnerability was found in the VPN Clients on the ADMCVE-2026-672457.0 High
- asustor inc. adm, asustor data master +1 moreA format string vulnerability was found in the Notification OAuth settings of ADMCVE-2026-672448.6 High
- asustor inc. adm, asustor data master +1 moreA format string vulnerability was found in the Rsync Backup on the ADMCVE-2026-181887.1 High
- asustor inc. adm, asustor data master +1 moreA format string vulnerability was found in the Internal Backup on the ADMCVE-2026-181877.1 High
- asustor inc. adm, asustor data master +1 moreA stored format string vulnerability was found in the FTP Backup on the ADMCVE-2026-181867.1 High
- asustor inc. adm, asustor data master +1 moreA command injection vulnerability was found in the PPTP VPN Clients on the ADMCVE-2026-6644Public exploit9.4 Critical
- asustor inc. adm, asustor data master +1 moreA stack-based buffer overflow vulnerability in the VPN Clients on the ADMCVE-2026-6643Public exploit8.6 High
- asustor adm, data master +1 moreA path traversal vulnerability was found in the FTP Backup on the ADM.CVE-2026-31799.2 Critical
- asustor adm, data master +1 moreAn improper certificate validation vulnerability was found in the FTP Backup on the ADM.CVE-2026-31008.3 High
- asustor adm, data master +1 moreAn improper input validation vulnerability was found in ADM while joining a AD Domain.CVE-2026-249369.5 Critical
- asustor adm, data master +1 moreAn improper certificate validation vulnerability was found in a third-party NAT traversal module.CVE-2026-249356.3 Medium
- asustor adm, data master +1 moreAn improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.CVE-2026-249346.3 Medium
- asustor adm, data master +1 moreAn improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.CVE-2026-249338.9 High
- asustor adm, data master +1 moreAn improper certificate validation vulnerability was found in ADM while updating the DDNS settings.CVE-2026-249328.9 High
- asustor adm, data master +1 moreA missing encryption of sensitive data vulnerability was found in the UPS settings of ADMCVE-2025-130537.0 High
- asustor adm, data master +1 moreAn improper certificates validation vulnerability was found in the Notification settings of ADMCVE-2025-130527.0 High
- asustor admAn improper access control vulnerability was found in the EZ Sync Manager of ADMCVE-2025-76997.1 High
- asustor admA stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADMCVE-2025-76184.8 Medium
- asustor admA stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADMCVE-2025-73804.8 Medium
- asustor admA security bypass vulnerability was found in DataSync Center installed on ADMCVE-2025-73795.2 Medium
- asustor admAn improper input validation vulnerability was found on manipulating configuration of ADMCVE-2025-73786.0 Medium
- asustor adm, data master +1 moreAn Arbitrary File Movement vulnerability was found on the ADMCVE-2023-44757.5 High
- asustor adm, data master +1 moreAn Improper Privilege Management vulnerability was found on the ADMCVE-2023-36998.7 High
- asustor adm, data master +1 moreA Command injection vulnerability was found on Printer service of ADMCVE-2023-36988.5 High
- asustor adm, data master +1 moreA Command injection vulnerability was found on Printer service of ADMCVE-2023-36978.5 High
- asustor adm, data master +1 moreA Command injection vulnerability was found on Printer service of ADMCVE-2023-29108.8 High
- asustor admA Directory traversal vulnerability was found on EZ Sync service of ADMCVE-2023-29098.5 High
- asustor adm, looksgood, soundsgood +2 moreA Cross-Site Scripting(XSS) vulnerability was found on ADMCVE-2023-25097.1 High
- asustor admA stack-based buffer overflow vulnerability was found in the ADMCVE-2023-307707.1 High
- asustor admA stack-based buffer overflow vulnerability was found on ADMCVE-2022-373987.1 High