AASUSTOR

Products

Exploited and recent CVEs

• CVE-2026-3179 Critical 9.2 A path traversal vulnerability was found in the FTP Backup on the ADM. 0.6%
• CVE-2026-3100 High 8.3 An improper certificate validation vulnerability was found in the FTP Backup on the ADM. 0.2%
• CVE-2026-24936 Critical 9.5 An improper input validation vulnerability was found in ADM while joining a AD Domain. 0.8%
• CVE-2026-24935 Medium 6.3 An improper certificate validation vulnerability was found in a third-party NAT traversal module. 0.2%
• CVE-2026-24934 Medium 6.3 An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address. 0.2%
• CVE-2026-24933 High 8.9 An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server. 0.2%
• CVE-2026-24932 High 8.9 An improper certificate validation vulnerability was found in ADM while updating the DDNS settings. 0.2%
• CVE-2025-13053 High 7.0 A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM <0.1%
• CVE-2025-13052 High 7.0 An improper certificates validation vulnerability was found in the Notification settings of ADM 0.2%
• CVE-2025-13051 Critical 9.3 Windows service used an uncontrolled search path element will cause unauthorized code execution with localsystem privileges 0.2%
• CVE-2025-8070 Critical 9.2 Windows service registered with an unquoted ImagePath vulnerability in the system registry 0.2%
• CVE-2025-7699 High 7.1 An improper access control vulnerability was found in the EZ Sync Manager of ADM 0.4%
• CVE-2025-7618 Medium 4.8 A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM 0.3%
• CVE-2025-7380 Medium 4.8 A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM 0.3%
• CVE-2025-7379 Medium 5.2 A security bypass vulnerability was found in DataSync Center installed on ADM 0.2%
• CVE-2025-7378 Medium 6.0 An improper input validation vulnerability was found on manipulating configuration of ADM 0.1%
• CVE-2023-4475 High 7.5 An Arbitrary File Movement vulnerability was found on the ADM 0.2%
• CVE-2023-3699 High 8.7 An Improper Privilege Management vulnerability was found on the ADM 0.2%
• CVE-2023-3698 High 8.5 A Command injection vulnerability was found on Printer service of ADM 0.6%
• CVE-2023-3697 High 8.5 A Command injection vulnerability was found on Printer service of ADM 0.7%
• CVE-2023-2910 High 8.8 A Command injection vulnerability was found on Printer service of ADM 1.6%
• CVE-2023-2909 High 8.5 A Directory traversal vulnerability was found on EZ Sync service of ADM 0.7%
• CVE-2023-2749 High 8.6 A Gain Information vulnerability was found on Download Center. 0.5%
• CVE-2023-2509 High 7.1 A Cross-Site Scripting(XSS) vulnerability was found on ADM 0.3%
• CVE-2023-2509 High 7.1 A Cross-Site Scripting(XSS) vulnerability was found on ADM 0.3%
• CVE-2023-2509 High 7.1 A Cross-Site Scripting(XSS) vulnerability was found on ADM 0.3%
• CVE-2023-30770 High 7.1 A stack-based buffer overflow vulnerability was found in the ADM 0.6%
• CVE-2022-37398 High 7.1 A stack-based buffer overflow vulnerability was found on ADM 0.7%