ASUSTOR ADM vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20238
3. 20257
4. 20267

Newest CVEs

• CVE-2026-3179

  A path traversal vulnerability was found in the FTP Backup on the ADM.

  ASUSTOR · ADM

  Critical9.2
• CVE-2026-3100

  An improper certificate validation vulnerability was found in the FTP Backup on the ADM.

  ASUSTOR · ADM

  High8.3
• CVE-2026-24936

  An improper input validation vulnerability was found in ADM while joining a AD Domain.

  ASUSTOR · ADM

  Critical9.5
• CVE-2026-24935

  An improper certificate validation vulnerability was found in a third-party NAT traversal module.

  ASUSTOR · ADM

  Medium6.3
• CVE-2026-24934

  An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.

  ASUSTOR · ADM

  Medium6.3
• CVE-2026-24933

  An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.

  ASUSTOR · ADM

  High8.9
• CVE-2026-24932

  An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.

  ASUSTOR · ADM

  High8.9
• CVE-2025-13053

  A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM

  ASUSTOR · ADM

  High7.0
• CVE-2025-13052

  An improper certificates validation vulnerability was found in the Notification settings of ADM

  ASUSTOR · ADM

  High7.0
• CVE-2025-7699

  An improper access control vulnerability was found in the EZ Sync Manager of ADM

  ASUSTOR · ADM

  High7.1