ASUSTOR Inc. data master vulnerabilities

Latest ASUSTOR Inc. data master CVEs

Newest publication first · page 1 of 2

1. CVE-2026-67248 A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM

   Published 2026-07-30

   High·CVSS 8.7 EPSS 0.49%

   A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue...

2. CVE-2026-67247 A path traversal vulnerability was found in the IHM Log handling of ADM

   Published 2026-07-30

   High·CVSS 7.1 EPSS 0.45%

   A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit thi...

3. CVE-2026-67246 A path traversal vulnerability was found in the Wallpaper component of ADM

   Published 2026-07-30

   Medium·CVSS 6.9 EPSS 0.46%

   A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipul...

4. CVE-2026-67245 A path traversal vulnerability was found in the VPN Clients on the ADM

   Published 2026-07-30

   High·CVSS 7.0 EPSS 0.33%

   A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this iss...

5. CVE-2026-67244 A format string vulnerability was found in the Notification OAuth settings of ADM

   Published 2026-07-30

   High·CVSS 8.6 EPSS 0.50%

   A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration input may be processed through an unsafe format string operation. An authenticated administrator can exploit this issue t...

6. CVE-2026-18188 A format string vulnerability was found in the Rsync Backup on the ADM

   Published 2026-07-30

   High·CVSS 7.1 EPSS 0.46%

   A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose...

7. CVE-2026-18187 A format string vulnerability was found in the Internal Backup on the ADM

   Published 2026-07-30

   High·CVSS 7.1 EPSS 0.46%

   A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an error response and processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...

8. CVE-2026-18186 A stored format string vulnerability was found in the FTP Backup on the ADM

   Published 2026-07-30

   High·CVSS 7.1 EPSS 0.46%

   A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can expl...

9. CVE-2026-6644 A command injection vulnerability was found in the PPTP VPN Clients on the ADM

   Published 2026-04-20

   Critical·CVSS 9.4 EPSS 1.9%

   A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break out of the restricted web environment and execute arbitrary code on the underlying operating system. This occurs due to insufficient validation...

10. CVE-2026-6643 A stack-based buffer overflow vulnerability in the VPN Clients on the ADM

    Published 2026-04-20

    High·CVSS 8.6 EPSS 0.47%

    A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf() and passing user-controlled data directly to printf(). Due to the lack of PIE and Stack Canary protections, an authenticated remote attacker can...

11. CVE-2026-3179 A path traversal vulnerability was found in the FTP Backup on the ADM.

    Published 2026-02-25

    Critical·CVSS 9.2 EPSS 0.57%

    The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings. A malicious server or MITM attacker can craft filenames containing path traversal sequences, causing the client to write files outside the intended backup...

12. CVE-2026-3100 An improper certificate validation vulnerability was found in the FTP Backup on the ADM.

    Published 2026-02-25

    High·CVSS 8.3 EPSS 0.19%

    The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS. An improper validated TLS/SSL certificates allows a remote attacker can intercept network traffic to perform a Man-in-the-Middle (MitM) at...

13. CVE-2026-24936 An improper input validation vulnerability was found in ADM while joining a AD Domain.

    Published 2026-02-03

    Critical·CVSS 9.5 EPSS 0.85%

    When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerability in a specific CGI program allowing an unauthenticated remote attacker to write arbitrary data to any file on the system. By exploiting this vulnerability,...

14. CVE-2026-24935 An improper certificate validation vulnerability was found in a third-party NAT traversal module.

    Published 2026-02-03

    Medium·CVSS 6.3 EPSS 0.15%

    A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle (MitM) attacker can intercept or redirect the NAT tunnel establish...

15. CVE-2026-24934 An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.

    Published 2026-02-03

    Medium·CVSS 6.3 EPSS 0.17%

    The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate when querying an external server for the device's WAN IP address. An unauthenticated remote attacker can perform a Man-in-the-Middle (MitM) attack to spoof the response, leading the de...

16. CVE-2026-24933 An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.

    Published 2026-02-03

    High·CVSS 8.9 EPSS 0.22%

    The API communication component fails to validate the SSL/TLS certificate when sending HTTPS requests to the server. An improper certificates validation vulnerability allows an unauthenticated remote attacker can perform a Man-in-the-Middle (MitM) attack to intercept the cleartex...

17. CVE-2026-24932 An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.

    Published 2026-02-03

    High·CVSS 8.9 EPSS 0.22%

    The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle...

18. CVE-2025-13053 A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM

    Published 2025-12-12

    High·CVSS 7.0 EPSS 0.10%

    When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept network traffic between the client and server can perform a man-in-the-middle (MITM) attack, which may obtain the sensitiv...

19. CVE-2025-13052 An improper certificates validation vulnerability was found in the Notification settings of ADM

    Published 2025-12-12

    High·CVSS 7.0 EPSS 0.19%

    When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle (MITM) attack, which may obta...

20. CVE-2023-4475 An Arbitrary File Movement vulnerability was found on the ADM

    Published 2023-08-22

    Medium·CVSS 5.5 EPSS 0.18%

    An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and b...

21. CVE-2023-3699 An Improper Privilege Management vulnerability was found on the ADM

    Published 2023-08-22

    Medium·CVSS 5.5 EPSS 0.16%

    An Improper Privilege Management vulnerability was found in ASUSTOR Data Master (ADM) allows an unprivileged local users to modify the storage devices configuration. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

22. CVE-2023-3698 A Command injection vulnerability was found on Printer service of ADM

    Published 2023-08-17

    High·CVSS 8.1 EPSS 0.64%

    Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

23. CVE-2023-3697 A Command injection vulnerability was found on Printer service of ADM

    Published 2023-08-17

    High·CVSS 8.8 EPSS 0.66%

    Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and create files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

24. CVE-2023-2910 A Command injection vulnerability was found on Printer service of ADM

    Published 2023-08-17

    High·CVSS 8.8 EPSS 1.6%

    Improper neutralization of special elements used in a command ('Command Injection') vulnerability in Printer service functionality in ASUSTOR Data Master (ADM) allows remote unauthorized users to execute arbitrary commands via unspecified vectors. Affected products and versions i...

25. CVE-2018-12319 Denial-of-service in the login page of ASUSTOR ADM 3.1.1 allows attackers to prevent users from signing in by placing malformed text in the title.

    Published 2018-12-04

    High·CVSS 7.5 EPSS 1.2%

    Denial-of-service in the login page of ASUSTOR ADM 3.1.1 allows attackers to prevent users from signing in by placing malformed text in the title.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.