AASUSTOR Inc.

Products

Exploited and recent CVEs

• CVE-2026-105324 Critical 9.2 An HTTP header injection vulnerability was found in the ADM 0.7%
• CVE-2026-18759 High 8.5 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync. 0.2%
• CVE-2026-18759 High 8.5 An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync. 0.2%
• CVE-2026-67248 High 8.7 A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM 0.5%
• CVE-2026-67247 High 7.1 A path traversal vulnerability was found in the IHM Log handling of ADM 0.5%
• CVE-2026-67246 Medium 6.9 A path traversal vulnerability was found in the Wallpaper component of ADM 0.5%
• CVE-2026-67245 High 7.0 A path traversal vulnerability was found in the VPN Clients on the ADM 0.3%
• CVE-2026-67244 High 8.6 A format string vulnerability was found in the Notification OAuth settings of ADM 0.5%
• CVE-2026-18188 High 7.1 A format string vulnerability was found in the Rsync Backup on the ADM 0.5%
• CVE-2026-18187 High 7.1 A format string vulnerability was found in the Internal Backup on the ADM 0.5%
• CVE-2026-18186 High 7.1 A stored format string vulnerability was found in the FTP Backup on the ADM 0.5%
• CVE-2026-6644 Critical 9.4 A command injection vulnerability was found in the PPTP VPN Clients on the ADM 1.9%
• CVE-2026-6643 High 8.6 A stack-based buffer overflow vulnerability in the VPN Clients on the ADM 0.5%