CVE-2026-3179— A path traversal vulnerability was found in the FTP Backup on the ADM.

A path traversal vulnerability was found in the FTP Backup on the ADM.

The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings. A malicious server or MITM attacker can craft filenames containing path traversal sequences, causing the client to write files outside the intended backup directory. A path traversal vulnerability may allow an attacker to overwrite arbitrary files on the system and potentially achieve privilege escalation or remote code execution. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.2.RE51.

N/A

对路径名的限制不恰当(路径遍历)

ASUSTOR ADM 安全漏洞

ASUSTOR ADM是中国华芸科技（ASUSTOR）公司的一种所有 ASUSTOR NAS 设备的专用操作系统。 ASUSTOR ADM 4.1.0版本至4.3.3.ROF1版本和ADM 5.0.0版本至5.1.2.RE51版本存在安全漏洞，该漏洞源于FTP备份功能未正确清理文件名，可能导致路径遍历攻击。

N/A

N/A