CVE-2026-18187

Name of the Vulnerable Software and Affected Versions ADM versions 4.1.0 through 4.3.3.RUN1 ADM versions 5.0.0 through 5.1.3.RI81

Description A format string vulnerability exists in the Internal Backup component. This occurs when user-controlled task input is included in an error response and processed via an unsafe format string operation. An authenticated attacker can leverage this to disclose memory information or trigger a denial of service of the affected CGI process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.