ASUSTOR ADM vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Latest ASUSTOR ADM vulnerabilities

CVE-2026-105324 — An HTTP header injection vulnerability was found in the ADM (CVSS 9.2)
CVE-2025-7699 — An improper access control vulnerability was found in the EZ Sync Manager of ADM (CVSS 7.1)
CVE-2025-7618 — A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM (CVSS 4.8)
CVE-2025-7380 — A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM (CVSS 4.8)
CVE-2025-7379 — A security bypass vulnerability was found in DataSync Center installed on ADM (CVSS 5.2)
CVE-2025-7378 — An improper input validation vulnerability was found on manipulating configuration of ADM (CVSS 6.0)
CVE-2023-2909 — A Directory traversal vulnerability was found on EZ Sync service of ADM (CVSS 10.0)
CVE-2023-2509 — A Cross-Site Scripting(XSS) vulnerability was found on ADM (CVSS 6.1)
CVE-2023-30770 — A stack-based buffer overflow vulnerability was found in the ADM (CVSS 9.8)
CVE-2022-37398 — A stack-based buffer overflow vulnerability was found on ADM (CVSS 8.8)
CVE-2018-11510 — (CVSS 9.8)