Skip to content

CyberSIXT Search

Vendor

ASUSTOR

No ASUSTOR CVE is in the CISA KEV catalogue.

Tracked since 4 Feb · latest article Wed 7 Oct · RSS

Open KEV deadlines: 0; None open
Added to KEV · 90 days: 0; of 0 all time
High exploit odds: 0; ≥ p95, not in KEV
Articles · 7 days: 0; usual rate

Exploited, by due date

No ASUSTOR CVE is in the CISA KEV catalogue.

Products

1 products · 2 CVEs in coverage

ADM2 CVEs · 0 in KEVlatest 7 Oct

Coverage

2 articles · all timeFull timeline →

Two articles so far, 4 Feb to 7 Oct.

Wed 4 Feb · first reportCVE-2026-24936: Critical ASUSTOR Flaw (CVSS 9.5) Allows Remote System TakeoverSecurityOnline
Wed 7 OctASUSTOR Fixes Critical NAS Flaw That Exposed Files Without LoginSecurityOnline

See the full timeline

7 OctASUSTOR Fixes Critical NAS Flaw That Exposed Files Without LoginSecurityOnline
4 FebCVE-2026-24936: Critical ASUSTOR Flaw (CVSS 9.5) Allows Remote System TakeoverSecurityOnline

All CVEs in coverage

2

CVE-2026-24936An improper input validation vulnerability was found in ADM while joining a AD Domain.CVSSUnrated–Not in KEV0.9%EPSS1article

CVE-2026-105324An HTTP header injection vulnerability was found in the ADMCVSS9.2Critical–Not in KEV0.7%EPSS1article

How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

High exploit odds means FIRST EPSS percentile ≥ 95, excluding entries in CISA KEV.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.