Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Asustor
Adm

asustor ADM Vulnerabilities: CVEs, CISA KEV & Security Advisories

35 CVEs

AT

asustor ADM Vulnerabilities

CVE security advisories and vulnerability history for ADM by asustor.

35

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

7.8

Avg CVSS

2018–2026

Last updated October 7, 2026

Overview

asustor ADM has 35 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.8. Affected platforms include arm, linux, x64, x86.

Severity and exploitation

How the CVSS severity of asustor ADM's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical6

High22

Medium7

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of asustor ADM's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of asustor ADM's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every asustor ADM version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

4.1 <= v <= 4.1.0.RLQ18 CVEs
4.1.0 <= v <= 4.3.3.RUN18 CVEs
5.0.0 <= v <= 5.1.3.RI818 CVEs
4.1.0 <= v <= 4.3.3.ROF16 CVEs
4.0 <= v <= 4.0.6.RIS15 CVEs
4.2 <= v <= 4.2.2.RI615 CVEs
5.0.0 <= v <= 5.1.1.RCI15 CVEs
4.0 <= v <= 4.0.6.REG23 CVEs
4.1.0 <= v <= 4.3.3.RH613 CVEs
5.0.0 <= v <= 5.0.0.RIN13 CVEs
4.1.0 <= v <= 4.1.02 CVEs
4.1.0 <= v <= 4.3.3.RKD22 CVEs
4.1.0 <= v <= 4.3.3.RR422 CVEs
4.2 <= v <= 4.2.1.RGE22 CVEs
5.0.0 <= v <= 5.1.0.RN422 CVEs
5.0.0 <= v <= 5.1.2.REO12 CVEs
<= 3.1.2.rhg11 CVE
1.0.0 <= v <= 1.0.0.r1121 CVE
1.1.0 <= v < 1.1.0.r2071 CVE
1.2.0 <= v < 1.2.0.r2061 CVE
3.5 <= v <= 3.5.9.RUE31 CVE
3.5.0 <= v <= 3.5.9.rue31 CVE
4.0 <= v <= 4.0.5.RVI11 CVE
4.0.0 <= v <= 4.0.01 CVE
4.0.0 <= v <= 4.0.5.rvi11 CVE
4.0.0 <= v <= 4.0.6.reg21 CVE
4.0.0.rib4 <= v <= 4.0.6.reg21 CVE
4.0.6 <= v <= 4.0.61 CVE
4.1 <= v < 4.3.1.R5A11 CVE
4.1 <= v <= 4.1.0.RJD11 CVE
4.1.0 <= v <= 4.1.0.rjd11 CVE
4.1.0 <= v <= 4.1.0rlq11 CVE
4.1.0 <= v <= 4.3.3.RWC11 CVE
4.1.0.rhu2 <= v < 4.2.1.rge21 CVE
4.2 <= v <= 4.2.0.RE711 CVE
4.2 <= v <= 4.2.2.RI61 CVE
4.2.0 <= v <= 4.2.01 CVE
4.2.0 <= v <= 4.2.1.rge21 CVE
4.2.1 <= v <= 4.2.11 CVE
5.0.0 <= v <= 5.1.2.RE511 CVE
5.0.0 <= v <= 5.1.4.RL211 CVE

Fixed in

1.1.0.r2071 CVE
1.2.0.r2061 CVE
4.2.1.rge21 CVE
4.3.1.R5A11 CVE

Find a version

35 CVEs

Sort

An HTTP header injection vulnerability was found in the ADM
CVE-2026-105324CWE-113
Critical · CVSS 9.2
EPSS 0.7% (50th pct)2026-10-07
A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM
CVE-2026-67248
Patch
CWE-121
High · CVSS 8.7
EPSS 0.5% (41th pct)2026-07-30
A path traversal vulnerability was found in the IHM Log handling of ADM
CVE-2026-67247
Patch
CWE-22
High · CVSS 7.1
EPSS 0.5% (38th pct)2026-07-30
A path traversal vulnerability was found in the Wallpaper component of ADM
CVE-2026-67246
Patch
CWE-22
Medium · CVSS 6.9
EPSS 0.5% (38th pct)2026-07-30
A path traversal vulnerability was found in the VPN Clients on the ADM
CVE-2026-67245
Patch
CWE-22
High · CVSS 7.0
EPSS 0.3% (24th pct)2026-07-30
A format string vulnerability was found in the Notification OAuth settings of ADM
CVE-2026-67244
Patch
CWE-134
High · CVSS 8.6
EPSS 0.5% (41th pct)2026-07-30
A format string vulnerability was found in the Rsync Backup on the ADM
CVE-2026-18188
Patch
CWE-134
High · CVSS 7.1
EPSS 0.5% (39th pct)2026-07-30
A format string vulnerability was found in the Internal Backup on the ADM
CVE-2026-18187
Patch
CWE-134
High · CVSS 7.1
EPSS 0.5% (39th pct)2026-07-30
A stored format string vulnerability was found in the FTP Backup on the ADM
CVE-2026-18186
Patch
CWE-134
High · CVSS 7.1
EPSS 0.5% (39th pct)2026-07-30
A command injection vulnerability was found in the PPTP VPN Clients on the ADM
CVE-2026-6644
Public exploit
Patch
CWE-78
Critical · CVSS 9.4
EPSS 2.1% (81th pct)2026-04-20
A stack-based buffer overflow vulnerability in the VPN Clients on the ADM
CVE-2026-6643
Patch
CWE-121
High · CVSS 8.6
EPSS 0.8% (55th pct)2026-04-20
An improper certificate validation vulnerability was found in the FTP Backup on the ADM.
CVE-2026-3100
Patch
CWE-295
High · CVSS 8.3
EPSS 0.3% (18th pct)2026-02-25
An improper input validation vulnerability was found in ADM while joining a AD Domain.
CVE-2026-24936
Patch
CWE-20
Critical · CVSS 9.5
EPSS 0.9% (58th pct)2026-02-03
An improper certificate validation vulnerability was found in a third-party NAT traversal module.
CVE-2026-24935
Patch
CWE-295
Medium · CVSS 6.3
EPSS 0.2% (4th pct)2026-02-03
An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.
CVE-2026-24934
Patch
CWE-295
Medium · CVSS 6.3
EPSS 0.2% (6th pct)2026-02-03
An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.
CVE-2026-24933
Patch
CWE-295
High · CVSS 8.9
EPSS 0.2% (12th pct)2026-02-03
An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.
CVE-2026-24932
Patch
CWE-295
High · CVSS 8.9
EPSS 0.2% (12th pct)2026-02-03
A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM
CVE-2025-13053
Patch
CWE-311
High · CVSS 7.0
EPSS 0.1% (1th pct)2025-12-12
An improper certificates validation vulnerability was found in the Notification settings of ADM
CVE-2025-13052
Patch
CWE-295
High · CVSS 7.0
EPSS 0.2% (7th pct)2025-12-12
An improper access control vulnerability was found in the EZ Sync Manager of ADM
CVE-2025-7699CWE-287
High · CVSS 7.1
EPSS 0.4% (33th pct)2025-07-16
A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM
CVE-2025-7618CWE-79
Medium · CVSS 4.8
EPSS 0.3% (25th pct)2025-07-14
A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM
CVE-2025-7380CWE-79
Medium · CVSS 4.8
EPSS 0.3% (25th pct)2025-07-14
A security bypass vulnerability was found in DataSync Center installed on ADM
CVE-2025-7379
Patch
CWE-352
Medium · CVSS 5.2
EPSS 0.2% (8th pct)2025-07-09
An improper input validation vulnerability was found on manipulating configuration of ADM
CVE-2025-7378
Patch
CWE-20
Medium · CVSS 6.0
EPSS 0.1% (4th pct)2025-07-09
High vulnerability · 2023-08-22
CVE-2023-4475
Patch
CWE-552
High · CVSS 7.5
EPSS 0.2% (7th pct)2023-08-22
High vulnerability · 2023-08-22
CVE-2023-3699
Patch
CWE-269
High · CVSS 8.7
EPSS 0.2% (4th pct)2023-08-22
High vulnerability · 2023-08-17
CVE-2023-3698
Patch
CWE-22
High · CVSS 8.5
EPSS 0.6% (50th pct)2023-08-17
A Command injection vulnerability was found on Printer service of ADM
CVE-2023-3697
Patch
CWE-22
High · CVSS 8.8
EPSS 0.7% (51th pct)2023-08-17
A Command injection vulnerability was found on Printer service of ADM
CVE-2023-2910
Patch
CWE-77
High · CVSS 8.8
EPSS 1.6% (75th pct)2023-08-17
A Directory traversal vulnerability was found on EZ Sync service of ADM
CVE-2023-2909CWE-22
Critical · CVSS 10.0
EPSS 0.7% (51th pct)2023-05-31

Showing 30 of 35

Common weakness types

The CWE weakness categories most often found in asustor ADM CVEs. Follow any weakness for its full explanation.

CWE-295Improper Certificate Validation6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')6 CVEs
CWE-134Use of Externally-Controlled Format String4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-287Improper Authentication1 CVE

Disclosure activity by year

How many asustor ADM CVEs were published each year.

2018

1

2022

1

2023

9

2025

7

2026

17

Other asustor products

Browse vulnerabilities for other products by asustor.

data master45 CVEs as602t13 CVEs as6202t6 CVEs as6202t firmware6 CVEs ABP2 CVEs ABP and AES2 CVEs AES2 CVEs asustor data master2 CVEs

All asustor vulnerabilities

Frequently asked questions

Common questions about asustor ADM vulnerabilities.

How many CVEs does asustor ADM have?: asustor ADM has 35 published CVE records since 2018.
How many asustor ADM CVEs are in CISA KEV?: None of asustor ADM's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for asustor ADM vulnerabilities?: Yes — 2 of asustor ADM's CVEs have a known public exploit.
Which versions of asustor ADM are affected?: 45 distinct asustor ADM versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in asustor ADM CVEs?: asustor ADM's CVEs most often map to these CWE weakness types: CWE-295 (Improper Certificate Validation), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-134 (Use of Externally-Controlled Format String), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
How many critical asustor ADM vulnerabilities are there?: asustor ADM has 6 critical and 22 high-severity CVEs.
What is the average severity of asustor ADM CVEs?: The average CVSS base score across asustor ADM's scored CVEs is 7.8.

References

All asustor vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track asustor ADM vulnerabilities

Get an alert for each new asustor ADM CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References