Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The API communication component fails to validate the SSL/TLS certificate when sending HTTPS requests to the server. An improper certificates validation vulnerability allows an unauthenticated remote attacker can perform a Man-in-the-Middle (MitM) attack to intercept the cleartext communication, potentially leading to the exposure of sensitive user information, including account emails, MD5 hashed passwords, and device serial numbers. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.1.RCI1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-24933 The API communication component fails to validate the SSL/TLS certificate when sending HTTPS requests to the server. An improper certificates validation vulnerability… https://www.cve.org/CVERecord?id=CVE-2026-24933
Post summary
CVE-2026-24933 exposes a certificate‑validation flaw in the API’s HTTPS communication component, potentially enabling man‑in‑the‑middle attacks.
CVE-2026-24933 Improper SSL/TLS Certificate Validation in ADM Enables Remote MitM Attac... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-24933 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The tweet announces CVE‑2026‑24933, describing an improper SSL/TLS certificate validation flaw in ADM that could allow remote MitM attacks, and links to additional vulnerability details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | asustor | data_master | - | - | - |