Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS. An improper validated TLS/SSL certificates allows a remote attacker can intercept network traffic to perform a Man-in-the-Middle (MitM) attack, which may intercept, modify, or obtain sensitive information such as authentication credentials and backup data. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.2.RE51.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3100 TLS Certificate Verification Bypass in ADM FTP Backup Enabling MitM Attacks https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3100
Post summary
CVE-2026-3100 is a TLS certificate verification bypass in ADM FTP Backup that permits Man‑in‑the‑Middle attacks.
CVE-2026-3100 The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS. An improper validated TLS/… https://www.cve.org/CVERecord?id=CVE-2026-3100
Post summary
CVE-2026-3100 describes a TLS certificate verification flaw in the FTP Backup feature of ADM, potentially allowing attackers to bypass security during FTPES/FTPS connections.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | asustor | data_master | - | - | - |