CVE-2026-3100 — An improper certificate validation vulnerability was found in the FTP Backup on the ADM.

CVE-2026-3100

An improper certificate validation vulnerability was found in the FTP Backup on the ADM. PUBLISHED

Description (CNA)

The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS. An improper validated TLS/SSL certificates allows a remote attacker can intercept network traffic to perform a Man-in-the-Middle (MitM) attack, which may intercept, modify, or obtain sensitive information such as authentication credentials and backup data. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.ROF1 as well as from ADM 5.0.0 through ADM 5.1.2.RE51.

Affected (CNA)

Vendor / product	Versions
ASUSTOR / ADM	affected 4.1.0 through 4.3.3.ROF1; affected 5.0.0 through 5.1.2.RE51

CWE

CWE-295

References

https://www.asustor.com/security/security_advisory_detail?id=53

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.