CVE-2026-24936

CRITIQUE 9.8CVE-2026-24936 · Published 03/02/2026 · updated 17/06/2026

En bref

CVE-2026-24936 est une vulnérabilité CRITIQUE (CVSS 9.8).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.85%, plus élevée que 58.1% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerability in a specific CGI program allowing an unauthenticated remote attacker to write arbitrary data to any file on the system. By exploiting this vulnerability, attackers can overwrite critical system files, leading to a complete system compromise. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.1.RCI1.

References

asustor.com/security/security_advisory_detail · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free