ASUSTOR ADM CVE-2026-105324: 548 NAS Exposed Online

ASUSTOR ADM carries CVE-2026-105324, an unauthenticated HTTP header injection rated 9.2 that leads to arbitrary file read via the web server. ZoomEye queries on October 9, 2026 found 548 matches by title versus only 13 by application. Fixes are ADM 5.1.4.RM62 and 4.3.3.RY62.

• CVE-2026-105324: unauthenticated header injection, CVSS 9.2
• ZoomEye: 548 title matches versus 13 application matches
• Flaw enables arbitrary file read through the web server
• Fixes: ADM 5.1.4.RM62 and 4.3.3.RY62