Asustor Data Master vulnerabilities

• asustor inc. adm, asustor data master +1 more A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM CVE-2026-67248 8.7 HighJuly 30, 2026
• asustor inc. adm, asustor data master +1 more A path traversal vulnerability was found in the IHM Log handling of ADM CVE-2026-67247 7.1 HighJuly 30, 2026
• asustor inc. adm, asustor data master +1 more A path traversal vulnerability was found in the Wallpaper component of ADM CVE-2026-67246 6.9 MediumJuly 30, 2026
• asustor inc. adm, asustor data master +1 more A path traversal vulnerability was found in the VPN Clients on the ADM CVE-2026-67245 7.0 HighJuly 30, 2026
• asustor inc. adm, asustor data master +1 more A format string vulnerability was found in the Notification OAuth settings of ADM CVE-2026-67244 8.6 HighJuly 30, 2026
• asustor inc. adm, asustor data master +1 more A format string vulnerability was found in the Rsync Backup on the ADM CVE-2026-18188 7.1 HighJuly 30, 2026
• asustor inc. adm, asustor data master +1 more A format string vulnerability was found in the Internal Backup on the ADM CVE-2026-18187 7.1 HighJuly 30, 2026
• asustor inc. adm, asustor data master +1 more A stored format string vulnerability was found in the FTP Backup on the ADM CVE-2026-18186 7.1 HighJuly 30, 2026
• asustor inc. adm, asustor data master +1 more A command injection vulnerability was found in the PPTP VPN Clients on the ADM CVE-2026-6644 Public exploit 9.4 CriticalApril 20, 2026
• asustor inc. adm, asustor data master +1 more A stack-based buffer overflow vulnerability in the VPN Clients on the ADM CVE-2026-6643 Public exploit 8.6 HighApril 20, 2026
• asustor adm, data master +1 more A path traversal vulnerability was found in the FTP Backup on the ADM. CVE-2026-3179 9.2 CriticalFebruary 25, 2026
• asustor adm, data master +1 more An improper certificate validation vulnerability was found in the FTP Backup on the ADM. CVE-2026-3100 8.3 HighFebruary 25, 2026
• asustor adm, data master +1 more An improper input validation vulnerability was found in ADM while joining a AD Domain. CVE-2026-24936 9.5 CriticalFebruary 3, 2026
• asustor adm, data master +1 more An improper certificate validation vulnerability was found in a third-party NAT traversal module. CVE-2026-24935 6.3 MediumFebruary 3, 2026
• asustor adm, data master +1 more An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address. CVE-2026-24934 6.3 MediumFebruary 3, 2026
• asustor adm, data master +1 more An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server. CVE-2026-24933 8.9 HighFebruary 3, 2026
• asustor adm, data master +1 more An improper certificate validation vulnerability was found in ADM while updating the DDNS settings. CVE-2026-24932 8.9 HighFebruary 3, 2026
• asustor adm, data master +1 more A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM CVE-2025-13053 7.0 HighDecember 12, 2025
• asustor adm, data master +1 more An improper certificates validation vulnerability was found in the Notification settings of ADM CVE-2025-13052 7.0 HighDecember 12, 2025
• asustor adm, data master +1 more An Arbitrary File Movement vulnerability was found on the ADM CVE-2023-4475 7.5 HighAugust 22, 2023
• asustor adm, data master +1 more An Improper Privilege Management vulnerability was found on the ADM CVE-2023-3699 8.7 HighAugust 22, 2023
• asustor adm, data master +1 more A Command injection vulnerability was found on Printer service of ADM CVE-2023-3698 8.5 HighAugust 17, 2023
• asustor adm, data master +1 more A Command injection vulnerability was found on Printer service of ADM CVE-2023-3697 8.5 HighAugust 17, 2023
• asustor adm, data master +1 more A Command injection vulnerability was found on Printer service of ADM CVE-2023-2910 8.8 HighAugust 17, 2023
• asustor data master Denial-of-service in the login page of ASUSTOR ADM 3.1.1 allows attackers to prevent users from... CVE-2018-12319 7.5 HighDecember 4, 2018
• asustor data master Information disclosure in the SNMP settings page in ASUSTOR ADM version 3.1.1 allows attackers to... CVE-2018-12318 8.8 HighDecember 4, 2018
• asustor data master OS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system... CVE-2018-12317 8.8 HighDecember 4, 2018
• asustor data master OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute... CVE-2018-12316 8.8 HighDecember 4, 2018
• asustor data master Missing verification of a password in ASUSTOR ADM version 3.1.1 allows attackers to change... CVE-2018-12315 6.5 MediumDecember 4, 2018
• asustor data master Directory Traversal in downloadwallpaper.cgi in ASUSTOR ADM version 3.1.1 allows attackers to... CVE-2018-12314 7.5 HighDecember 4, 2018
• asustor data master OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system... CVE-2018-12313 9.8 CriticalDecember 4, 2018
• asustor data master OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system... CVE-2018-12312 8.8 HighDecember 4, 2018
• asustor data master Cross-site scripting vulnerability in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers... CVE-2018-12311 5.4 MediumDecember 4, 2018
• asustor data master Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute... CVE-2018-12310 5.4 MediumDecember 4, 2018
• asustor data master Directory Traversal in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to upload files... CVE-2018-12309 7.5 HighDecember 4, 2018
• asustor data master Encryption key disclosure in share.cgi in ASUSTOR ADM version 3.1.1 allows attackers to obtain... CVE-2018-12308 6.5 MediumDecember 4, 2018
• asustor data master OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system... CVE-2018-12307 8.8 HighDecember 4, 2018
• asustor data master Directory Traversal in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to view... CVE-2018-12306 7.5 HighDecember 4, 2018
• asustor data master Cross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute... CVE-2018-12305 6.1 MediumDecember 4, 2018
• asustor data master, tenable asustor data master +1 more ASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is... CVE-2018-15699 6.1 MediumAugust 27, 2018
• asustor data master, tenable asustor data master +1 more ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read... CVE-2018-15698 6.5 MediumAugust 27, 2018
• asustor data master, tenable asustor data master +1 more ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read... CVE-2018-15697 6.5 MediumAugust 27, 2018
• asustor data master, tenable asustor data master +1 more ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to... CVE-2018-15696 4.3 MediumAugust 27, 2018
• asustor data master, tenable asustor data master +1 more ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to... CVE-2018-15695 6.5 MediumAugust 27, 2018
• asustor data master, tenable asustor data master +1 more ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to... CVE-2018-15694 7.5 HighAugust 27, 2018
• asustor data master The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL... CVE-2018-11511 Public exploit EPSS 11.1% 9.8 CriticalAugust 16, 2018
• asustor data master ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the... CVE-2018-11509 Public exploit EPSS 12.4% 9.8 CriticalAugust 16, 2018