Asustor Adm vulnerabilities

• asustor adm, data master +1 more A path traversal vulnerability was found in the FTP Backup on the ADM. CVE-2026-3179 9.2 CriticalFebruary 25, 2026
• asustor adm, data master +1 more An improper certificate validation vulnerability was found in the FTP Backup on the ADM. CVE-2026-3100 8.3 HighFebruary 25, 2026
• asustor adm, data master +1 more An improper input validation vulnerability was found in ADM while joining a AD Domain. CVE-2026-24936 9.5 CriticalFebruary 3, 2026
• asustor adm, data master +1 more An improper certificate validation vulnerability was found in a third-party NAT traversal module. CVE-2026-24935 6.3 MediumFebruary 3, 2026
• asustor adm, data master +1 more An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address. CVE-2026-24934 6.3 MediumFebruary 3, 2026
• asustor adm, data master +1 more An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server. CVE-2026-24933 8.9 HighFebruary 3, 2026
• asustor adm, data master +1 more An improper certificate validation vulnerability was found in ADM while updating the DDNS settings. CVE-2026-24932 8.9 HighFebruary 3, 2026
• asustor adm, data master +1 more A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM CVE-2025-13053 7.0 HighDecember 12, 2025
• asustor adm, data master +1 more An improper certificates validation vulnerability was found in the Notification settings of ADM CVE-2025-13052 7.0 HighDecember 12, 2025
• asustor adm An improper access control vulnerability was found in the EZ Sync Manager of ADM CVE-2025-7699 7.1 HighJuly 16, 2025
• asustor adm A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM CVE-2025-7618 4.8 MediumJuly 14, 2025
• asustor adm A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM CVE-2025-7380 4.8 MediumJuly 14, 2025
• asustor adm A security bypass vulnerability was found in DataSync Center installed on ADM CVE-2025-7379 5.2 MediumJuly 9, 2025
• asustor adm An improper input validation vulnerability was found on manipulating configuration of ADM CVE-2025-7378 6.0 MediumJuly 9, 2025
• asustor adm, data master +1 more An Arbitrary File Movement vulnerability was found on the ADM CVE-2023-4475 7.5 HighAugust 22, 2023
• asustor adm, data master +1 more An Improper Privilege Management vulnerability was found on the ADM CVE-2023-3699 8.7 HighAugust 22, 2023
• asustor adm, data master +1 more A Command injection vulnerability was found on Printer service of ADM CVE-2023-3698 8.5 HighAugust 17, 2023
• asustor adm, data master +1 more A Command injection vulnerability was found on Printer service of ADM CVE-2023-3697 8.5 HighAugust 17, 2023
• asustor adm, data master +1 more A Command injection vulnerability was found on Printer service of ADM CVE-2023-2910 8.8 HighAugust 17, 2023
• asustor adm A Directory traversal vulnerability was found on EZ Sync service of ADM CVE-2023-2909 8.5 HighMay 31, 2023
• asustor adm, looksgood, soundsgood +2 more A Cross-Site Scripting(XSS) vulnerability was found on ADM CVE-2023-2509 7.1 HighMay 17, 2023
• asustor adm A stack-based buffer overflow vulnerability was found in the ADM CVE-2023-30770 7.1 HighApril 17, 2023
• asustor adm A stack-based buffer overflow vulnerability was found on ADM CVE-2022-37398 7.1 HighAugust 5, 2022
• asustor adm The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution... CVE-2018-11510 Public exploit EPSS 43.7% 9.8 CriticalJune 28, 2018