Login Request a demo
AD
Product
ADM
by ASUSTOR · last CVE Feb 25, 2026
14
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 4High 2Medium 6Low 2
Severity
All severities14Critical4High2Medium6Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ADM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-2909
10.0
1%
May 31
EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files
Affected: 4.0.0 through 4.0.6.reg2; 4.1.0 through 4.1.0rlq1; 4.2.0 through 4.2.1.rge2
CVE-2026-24936
9.8
1%
Feb 3
An improper input validation vulnerability was found in ADM while joining a AD Domain.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2023-30770
9.8
1%
Apr 17
A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation
Affected: 4.0.0.rib4 through 4.0.6.reg2; 4.1.0.rhu2 before 4.2.1.rge2
CVE-2018-11510
9.8
44%
Jun 28
The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by embedding OS commands in the…
Affected: through 3.1.2.rhg1
Showing 4