GCVE - cpe:2.3:a:asustor_inc.:adm:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:asustor_inc.:adm:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Asustor Inc. (`152badb6-470b-5fea-96d4-b8e4fcc21258`)
Product	Adm (`75e62a01-65a0-53f6-a9ba-3a68fbecc474`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-18186`	vulnerable	2026-09-16 04:34:02.144635	A stored format string vulnerability was found in the FTP Backup on the ADM A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory information or cause denial of service of the affected CGI process. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81. Published: 2026-07-30T02:44:33.625Z Updated: 2026-08-04T07:29:21.773Z Open on db.gcve.eu Reference links https://www.asustor.com/security/security_advisory_detail?id=67	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-18187`	vulnerable	2026-09-16 04:34:02.052368	A format string vulnerability was found in the Internal Backup on the ADM A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an error response and processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory information or cause denial of service of the affected CGI process. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81. Published: 2026-07-30T02:54:45.595Z Updated: 2026-08-04T07:28:39.992Z Open on db.gcve.eu Reference links https://www.asustor.com/security/security_advisory_detail?id=67	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-18188`	vulnerable	2026-09-16 04:34:01.701973	A format string vulnerability was found in the Rsync Backup on the ADM A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data may be processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory information or cause denial of service of the affected backup component. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81. Published: 2026-07-30T02:59:08.566Z Updated: 2026-08-04T07:27:32.766Z Open on db.gcve.eu Reference links https://www.asustor.com/security/security_advisory_detail?id=67	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-67248`	vulnerable	2026-09-16 04:33:06.039242	A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial of service of the affected CGI process. Further impact may be possible depending on exploitability and runtime protections. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81. Published: 2026-07-30T03:48:04.856Z Updated: 2026-08-04T07:32:46.227Z Open on db.gcve.eu Reference links https://www.asustor.com/security/security_advisory_detail?id=69	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-67244`	vulnerable	2026-09-16 04:33:05.981516	A format string vulnerability was found in the Notification OAuth settings of ADM A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration input may be processed through an unsafe format string operation. An authenticated administrator can exploit this issue to disclose memory information or cause denial of service of the affected component. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81. Published: 2026-07-30T03:04:16.812Z Updated: 2026-08-04T07:30:04.580Z Open on db.gcve.eu Reference links https://www.asustor.com/security/security_advisory_detail?id=67	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-67245`	vulnerable	2026-09-16 04:33:05.953969	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-67247`	vulnerable	2026-09-16 04:33:05.852347	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-67246`	vulnerable	2026-09-16 04:33:05.629283	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-6644`	vulnerable	2026-06-08 08:07:04.966684	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-6643`	vulnerable	2026-06-08 08:07:04.965028	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.