CVE-2026-67245

Name of the Vulnerable Software and Affected Versions ADM versions 4.1.0 through 4.3.3.RUN1 ADM versions 5.0.0 through 5.1.3.RI81

Description A path traversal issue exists in the VPN Clients on the ADM. This occurs because the system does not sufficiently validate the certificate name input provided by the user before using it to build the upload destination path. An authenticated attacker can exploit this to write an uploaded certificate file outside the designated VPN certificate directory, depending on process privileges and filesystem permissions. Path traversal is a technique that allows an attacker to access files and directories that are stored outside the web root folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.