Login Request a demo
AD
Product
ADM
by ASUSTOR · last CVE Feb 25, 2026
19
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 4High 3Medium 10Low 2
Severity
All severities19Critical4High3Medium10Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ADM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3100
6.5
0%
Feb 25
An improper certificate validation vulnerability was found in the FTP Backup on the ADM.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.2.RE51
CVE-2023-2509
6.1
0%
May 17
A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps
Affected: 4.0.0; 4.0.6; 4.1.0; 4.1.0; 4.2.1; 4.2.1
CVE-2025-7378
6.0
0%
Jul 9
An improper input validation vulnerability was found on manipulating configuration of ADM
Affected: 4.1 before 4.3.1.R5A1
CVE-2026-24933
5.9
0%
Feb 3
An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2026-24932
5.9
0%
Feb 3
An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2025-13052
5.9
0%
Dec 12
An improper certificates validation vulnerability was found in the Notification settings of ADM
Affected: 4.1.0 through 4.3.3.RKD2; 5.0.0 through 5.1.0.RN42
CVE-2026-24935
5.6
0%
Feb 3
An improper certificate validation vulnerability was found in a third-party NAT traversal module.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2025-7379
5.2
0%
Jul 9
A security bypass vulnerability was found in DataSync Center installed on ADM
Affected: 1.1.0 before 1.1.0.r207; 1.2.0 before 1.2.0.r206
CVE-2025-7618
4.8
0%
Jul 14
A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM
Affected: 4.1.0 through 4.3.3.RH61; 5.0.0 through 5.0.0.RIN1; 1.0.0 through 1.0.0.r112
CVE-2025-7380
4.8
0%
Jul 14
A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM
Affected: 4.1.0 through 4.3.3.RH61; 5.0.0 through 5.0.0.RIN1
Showing 10