August 10, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-3179NVD

Vulnerability Summary

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ASUSTOR ADM FTP Backup on Linux, x86, ARM, 64 bit allows Path Traversal.This issue affects ADM: from 4.1.0 through 4.3.3.ROF1, from 5.0.0 through 5.1.2.RE51.
Severity Level
CRITICAL(9.2)
Published Date
Feb 25, 2026
Last Modified
Feb 25, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
0.46%Probability
Root Weakness (CWE)
CWE-22: Path Traversal ↗
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory.
CVSS v4.0 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone

External References