Asustor Inc.

11 CVEs across 4 Asustor Inc. products. Browse Asustor Inc. vulnerabilities, severities, and proof-of-concept exploits.

Asustor Inc. products with known CVEs

ProductCVEs
Adm10
Abp1
Abp And Aes1
Aes1
Asustor Inc. CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-187592026-08-04The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication (IPC) mechanism protected by AES encry…
CVE-2026-67248High8.82026-07-30A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly v…
CVE-2026-67247Medium6.52026-07-30A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently…
CVE-2026-67246Medium6.52026-07-30A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not suffic…
CVE-2026-67245High8.12026-07-30A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficie…
CVE-2026-67244High7.22026-07-30A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration…
CVE-2026-18188High8.12026-07-30A format string vulnerability was found in the Rsync Backup on the ADM. The vulnerability occurs because user-controlled rsync backup configuration or log data…
CVE-2026-18187High8.12026-07-30A format string vulnerability was found in the Internal Backup on the ADM. The vulnerability occurs because user-controlled task input may be included in an er…
CVE-2026-18186High8.12026-07-30A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be…
CVE-2026-6644Critical9.12026-04-20A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break out of the restricted…
CVE-2026-6643Critical9.92026-04-20A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf() and passing user-contro…