CVE-2026-67247 is a path traversal vulnerability in the IHM Log handling of ADM. The vulnerability arises due to insufficient validation of user-controlled disk serial input used in constructing file paths for IHM log database files. This flaw allows an authenticated attacker to manipulate the file path and access unintended filesystem locations or log database files. The affected ADM versions include 4.1.0 through 4.3.3.RUN1 and 5.0.0 through 5.1.3.RI81. No known exploits in the wild have been reported. The vulnerability is categorized under CWE-22 (Path Traversal).

An authenticated attacker can exploit this vulnerability to cause the affected component to access unintended filesystem paths or log database files. This could lead to unauthorized access or manipulation of sensitive log data or other files accessible via the path traversal. The exact impact depends on the privileges of the attacker and the files accessible through the traversal.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. In the meantime, restrict access to the affected ADM versions to trusted users only and consider additional access controls on the filesystem to limit potential impact.