Login Request a demo
AD
Product
ADM
by ASUSTOR · last CVE Feb 25, 2026
24
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities24In the news0Timeline
Severity mix
Critical 4High 6Medium 12Low 2
Severity
All severities24Critical4High6Medium12Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add ADM to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3100
6.5
0%
Feb 25
An improper certificate validation vulnerability was found in the FTP Backup on the ADM.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.2.RE51
CVE-2023-2509
6.1
0%
May 17
A Cross-Site Scripting(XSS) vulnerability was found on ADM
Affected: 4.0 through 4.0.6.REG2; 4.1 through 4.1.0.RLQ1; 4.2 through 4.2.1.RGE2
CVE-2025-7378
6.0
0%
Jul 9
An improper input validation vulnerability was found on manipulating configuration of ADM
Affected: 4.1 before 4.3.1.R5A1
CVE-2026-24933
5.9
0%
Feb 3
An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2026-24932
5.9
0%
Feb 3
An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2025-13052
5.9
0%
Dec 12
An improper certificates validation vulnerability was found in the Notification settings of ADM
Affected: 4.1.0 through 4.3.3.RKD2; 5.0.0 through 5.1.0.RN42
CVE-2026-24935
5.6
0%
Feb 3
An improper certificate validation vulnerability was found in a third-party NAT traversal module.
Affected: 4.1.0 through 4.3.3.ROF1; 5.0.0 through 5.1.1.RCI1
CVE-2023-4475
5.5
0%
Aug 22
An Arbitrary File Movement vulnerability was found on the ADM
Affected: 4.0 through 4.0.6.RIS1; 4.1 through 4.1.0.RLQ1; 4.2 through 4.2.2.RI61
CVE-2023-3699
5.5
0%
Aug 22
An Improper Privilege Management vulnerability was found on the ADM
Affected: 4.0 through 4.0.6.RIS1; 4.1 through 4.1.0.RLQ1; 4.2 through 4.2.2.RI61
CVE-2025-7379
5.2
0%
Jul 9
A security bypass vulnerability was found in DataSync Center installed on ADM
Affected: 1.1.0 before 1.1.0.r207; 1.2.0 before 1.2.0.r206
CVE-2025-7618
4.8
0%
Jul 14
A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM
Affected: 4.1.0 through 4.3.3.RH61; 5.0.0 through 5.0.0.RIN1; 1.0.0 through 1.0.0.r112
CVE-2025-7380
4.8
0%
Jul 14
A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM
Affected: 4.1.0 through 4.3.3.RH61; 5.0.0 through 5.0.0.RIN1
Showing 12