Vulnerabilities

TI-2026-20120 CVE-2026-24935 · GHSA-mmqq-p5mv-jc88

An improper certificate validation vulnerability was found in a third-party NAT traversal module.

LOW 27

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00154 Published 2026-02-03 No fix listed CWE-295

TI-2026-20119 CVE-2026-24934 · GHSA-53xr-2xx3-73wm

Improper certificate validation in ASUSTOR ADM

LOW 27

The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate when querying an external server for the device's WAN IP address.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00166 Published 2026-02-03 No fix listed CWE-295

TI-2026-20118 CVE-2026-24933 · GHSA-h85p-pj9x-mcrr

An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.

LOW 38

The API communication component fails to validate the SSL/TLS certificate when sending HTTPS requests to the server.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00217 Published 2026-02-03 No fix listed CWE-295

TI-2026-20117 CVE-2026-24932 · GHSA-78vp-42ph-7f4v

An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.

LOW 38

The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00219 Published 2026-02-03 No fix listed CWE-295

Vulnerabilities

Filters

An improper certificate validation vulnerability was found in a third-party NAT traversal module.

Improper certificate validation in ASUSTOR ADM

An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.

An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.