Login Request a demo
AD
Product
ADM
by ASUSTOR · last CVE Feb 25, 2026
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 4High 2Medium 6Low 2
Severity
All severities14Critical4High2Medium6Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ADM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-2909
10.0
1%
May 31
EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files
Affected: 4.0.0 through 4.0.6.reg2; 4.1.0 through 4.1.0rlq1; 4.2.0 through 4.2.1.rge2
CVE-2026-24936
9.8
1%
Feb 3
An improper input validation vulnerability was found in ADM while joining a AD Domain.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2023-30770
9.8
1%
Apr 17
A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation
Affected: 4.0.0.rib4 through 4.0.6.reg2; 4.1.0.rhu2 before 4.2.1.rge2
CVE-2018-11510
9.8
44%
Jun 28
The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by embedding OS commands in the…
Affected: through 3.1.2.rhg1
CVE-2022-37398
8.8
1%
Aug 5
A stack-based buffer overflow vulnerability was found on ADM
Affected: 3.5 through 3.5.9.RUE3; 4.0 through 4.0.5.RVI1; 4.1 through 4.1.0.RJD1
CVE-2026-3179
8.1
1%
Feb 25
A path traversal vulnerability was found in the FTP Backup on the ADM.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.2.RE51
CVE-2026-3100
6.5
0%
Feb 25
An improper certificate validation vulnerability was found in the FTP Backup on the ADM.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.2.RE51
CVE-2023-2509
6.1
0%
May 17
A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps
Affected: 4.0.0; 4.0.6; 4.1.0; 4.1.0; 4.2.1; 4.2.1
CVE-2026-24933
5.9
0%
Feb 3
An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2026-24932
5.9
0%
Feb 3
An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2025-13052
5.9
0%
Dec 12
An improper certificates validation vulnerability was found in the Notification settings of ADM
Affected: 4.1.0 through 4.3.3.RKD2; 5.0.0 through 5.1.0.RN42
CVE-2026-24935
5.6
0%
Feb 3
An improper certificate validation vulnerability was found in a third-party NAT traversal module.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2026-24934
3.7
0%
Feb 3
An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2025-13053
3.7
0%
Dec 12
A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM
Affected: 4.1.0 through 4.3.3.RKD2; 5.0.0 through 5.1.0.RN42
Showing 14