What’s Vulnerable › Products
Tenable ASUSTOR Data Master vulnerabilities
45 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 19 published in the last 12 months.
Check whether your Tenable ASUSTOR Data Master version is affected
Latest Tenable ASUSTOR Data Master vulnerabilities
- CVE-2026-67248 — A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM (CVSS 8.8)
- CVE-2026-67247 — A path traversal vulnerability was found in the IHM Log handling of ADM (CVSS 6.5)
- CVE-2026-67246 — A path traversal vulnerability was found in the Wallpaper component of ADM (CVSS 6.5)
- CVE-2026-67245 — A path traversal vulnerability was found in the VPN Clients on the ADM (CVSS 8.1)
- CVE-2026-67244 — A format string vulnerability was found in the Notification OAuth settings of ADM (CVSS 7.2)
- CVE-2026-18188 — A format string vulnerability was found in the Rsync Backup on the ADM (CVSS 8.1)
- CVE-2026-18187 — A format string vulnerability was found in the Internal Backup on the ADM (CVSS 8.1)
- CVE-2026-18186 — A stored format string vulnerability was found in the FTP Backup on the ADM (CVSS 8.1)
- CVE-2026-6644 — A command injection vulnerability was found in the PPTP VPN Clients on the ADM (CVSS 9.1)
- CVE-2026-6643 — A stack-based buffer overflow vulnerability in the VPN Clients on the ADM (CVSS 9.9)
- CVE-2026-3179 — A path traversal vulnerability was found in the FTP Backup on the ADM. (CVSS 8.1)
- CVE-2026-3100 — An improper certificate validation vulnerability was found in the FTP Backup on the ADM. (CVSS 6.5)
- CVE-2026-24936 — An improper input validation vulnerability was found in ADM while joining a AD Domain. (CVSS 9.8)
- CVE-2026-24935 — An improper certificate validation vulnerability was found in a third-party NAT traversal module. (CVSS 5.6)
- CVE-2026-24934 — An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address. (CVSS 3.7)
- CVE-2026-24933 — An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server. (CVSS 5.9)
- CVE-2026-24932 — An improper certificate validation vulnerability was found in ADM while updating the DDNS settings. (CVSS 5.9)
- CVE-2025-13053 — A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM (CVSS 3.7)
- CVE-2025-13052 — An improper certificates validation vulnerability was found in the Notification settings of ADM (CVSS 5.9)
- CVE-2023-4475 — An Arbitrary File Movement vulnerability was found on the ADM (CVSS 5.5)
- CVE-2023-3699 — An Improper Privilege Management vulnerability was found on the ADM (CVSS 5.5)
- CVE-2023-3698 — A Command injection vulnerability was found on Printer service of ADM (CVSS 8.1)
- CVE-2023-3697 — A Command injection vulnerability was found on Printer service of ADM (CVSS 8.8)
- CVE-2023-2910 — A Command injection vulnerability was found on Printer service of ADM (CVSS 8.8)
- CVE-2018-12319 — (CVSS 7.5)