This vulnerability (CVE-2026-67248) is a stack-based buffer overflow in ASUSTOR ADM's File Explorer. It occurs because user input is not properly validated before being decoded and copied into a fixed-size stack buffer, leading to potential memory corruption. An attacker with authentication privileges can exploit this to cause denial of service of the CGI process handling the request. The vulnerability affects ADM versions 4.1.0 through 4.3.3.RUN1 and 5.0.0 through 5.1.3.RI81. No vendor advisory or patch information is currently provided, and no known exploits are reported in the wild.

An authenticated attacker can exploit this vulnerability to cause denial of service of the affected CGI process in ASUSTOR ADM. Further impact may be possible depending on exploitability and runtime protections, but no additional confirmed impacts are documented. The CVSS 4.0 base score is 8.7 (high severity), reflecting network attack vector, low attack complexity, no user interaction, and high impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the File Explorer functionality to trusted authenticated users only and monitor for unusual activity. No official patch or workaround has been published at this time.