Path Traversal in Asustor Inc. Adm
CVE-2026-67245
A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An au…
Vulnerability class: Path Traversal (Directory Traversal)
Affected products
- Asustor Inc. Adm — versions 5.0.0, 4.1.0
Weakness classification (CWE)
References
- security@asustor.com (vendor-advisory)