Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf() and passing user-controlled data directly to printf(). Due to the lack of PIE and Stack Canary protections, an authenticated remote attacker can exploit these to execute arbitrary code as the web server user. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RR42 as well as from ADM 5.0.0 through ADM 5.1.2.REO1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-20 | 2 | Disclosure2 |
| 2026-04-24 | 1 | Disclosure1 |
⚠️ Vulnerabilidades en productos Asustor ❗ CVE-2026-6644 ❗ CVE-2026-6643 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-asustor/ https://t.co/gZAb94BHJ4
Post summary
The post announces new CVE vulnerabilities (CVE‑2026‑6644 and CVE‑2026‑6643) affecting Asustor products, providing links for additional information.
CVE-2026-6643 A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM. The issue stems from the use of unbounded sscanf() and passing user-controlled data… https://www.cve.org/CVERecord?id=CVE-2026-6643
Post summary
The text announces a stack-based buffer overflow vulnerability in VPN Clients, detailing its cause but giving no exploit code or patch information.
CVE-2026-6643 Stack-Based Buffer Overflow in ADM VPN Client 4.1.0 Through 5.1.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6643
Post summary
A stack‑based buffer overflow has been disclosed for ADM VPN Client 4.1.0 through 5.1.2 (CVE‑2026‑6643), but no exploitation or patch details are present.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | asustor | data_master | - | - | - |