Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2026-3100
PUBLISHED
More InfoOfficial Page
Assigner-ASUSTOR1
Assigner Org ID-f35eaae9-79f2-4d0d-a5c7-7bea6ed6be77
View Known Exploited Vulnerability (KEV) details
Published At-25 Feb, 2026 | 05:52
Updated At-27 Feb, 2026 | 14:26
Rejected At-
▼CVE Numbering Authority (CNA)
An improper certificate validation vulnerability was found in the FTP Backup on the ADM.

The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS. An improper validated TLS/SSL certificates allows a remote attacker can intercept network traffic to perform a Man-in-the-Middle (MitM) attack, which may intercept, modify, or obtain sensitive information such as authentication credentials and backup data. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.2.RE51.

Affected Products
Vendor
ASUSTOR Inc.ASUSTOR
Product
ADM
Package Name
FTP Backup
Platforms
  • Linux
  • x86
  • ARM
  • 64 bit
Default Status
unaffected
Versions
Affected
  • From 4.1.0 through 4.3.3.ROF1 (custom)
  • From 5.0.0 through 5.1.2.RE51 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-295CWE-295 Improper Certificate Validation
Type: CWE
CWE ID: CWE-295
Description: CWE-295 Improper Certificate Validation
Metrics
VersionBase scoreBase severityVector
4.08.3HIGH
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Version: 4.0
Base score: 8.3
Base severity: HIGH
Vector:
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-157CAPEC-157 Sniffing Attacks
CAPEC ID: CAPEC-157
Description: CAPEC-157 Sniffing Attacks
Solutions

Configurations

Workarounds

Exploits

Credits

finder
Nuke
Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://www.asustor.com/security/security_advisory_detail?id=53
vendor-advisory
Hyperlink: https://www.asustor.com/security/security_advisory_detail?id=53
Resource:
vendor-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found