Skip to content
OpenAdvisories

Vendor

ASUSTOR

38 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-6644 Public exploit

    A command injection vulnerability was found in the PPTP VPN Clients on the ADM

    A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break out of the restricted web environment and execute arbitrary code on the underlying operating system. This occurs due to in…

  • High 8.6
    CVE-2026-6643 Public exploit

    A stack-based buffer overflow vulnerability in the VPN Clients on the ADM

    A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf() and passing user-controlled data directly to printf(). Due to the lack of PIE and Stack Canary protections, an authenticate…