CVE-2026-18186

Name of the Vulnerable Software and Affected Versions ADM versions 4.1.0 through 4.3.3.RUN1 ADM versions 5.0.0 through 5.1.3.RI81

Description A stored format string vulnerability exists in the FTP Backup feature. This occurs when user-controlled backup configuration data is written to a task log and subsequently processed using an unsafe format string operation. An authenticated attacker can leverage this to disclose memory information or trigger a denial of service of the affected CGI process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.