CLSA-2026-1784596298 TuxCare security update for adm-zip (2 CVEs)

TuxCare rebuilt adm-zip to address 2 CVEs. Fixed in 0.4.7-tuxcare.1...

CLSA-2026-1776731784 TuxCare security update for adm-zip (1 CVE)

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.4.4-tuxcare.1...

PT-2026-75678

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.18-tuxcare.1...

PT-2026-74508

TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.4.4-tuxcare.1...

PT-2026-75611

TuxCare rebuilt adm-zip to address 2 CVEs. Fixed in 0.4.16-tuxcare.1...

PT-2026-75520

TuxCare rebuilt adm-zip to address 3 CVEs. Fixed in 0.4.7-tuxcare.1...

CVE-2026-67247

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...

CVE-2026-67245

A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...

CVE-2026-67248

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...

CVE-2026-67248 A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...

CVE-2026-67248

The CVE-2026-67248 issue affects ADM’s File Explorer and is caused by a stack-based buffer overflow: user-controlled input is not properly validated before decoding and copying into a fixed-size stack buffer. An authenticated attacker could deny service to the affected CGI process, with possible ...

CVE-2026-67247

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...

CVE-2026-67246

A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipulate files outside...

EUVD-2026-50962

A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...

CVE-2026-67244

A format string vulnerability in ADM’s Notification OAuth settings is triggered by user-controlled notification configuration input that is processed via an unsafe format-string operation. Exploitation requires authenticated administrator privileges and can disclose memory information or cause de...

CVE-2026-18188

CVE-2026-18188 describes a format-string vulnerability in the ADM’s Rsync Backup component. Affected software ranges: ADM 4.1.0–4.3.3.RUN1 and ADM 5.0.0–5.1.3.RI81. The issue arises when user-controlled rsync backup configuration or log data are processed via unsafe format-string operations, allo...

CVE-2026-18186

A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to...

CVE-2026-67245: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...

PT-2026-66360

Name of the Vulnerable Software and Affected Versions ADM versions 4.1.0 through 4.3.3.RUN1 ADM versions 5.0.0 through 5.1.3.RI81 Description A path traversal issue exists in the IHM Log handling. This occurs because the disk serial input provided by a user is not sufficiently validated before...

CVE-2026-67248: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM. The vulnerability occurs because user-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer. An authenticated attacker can exploit this issue to cause denial ...