CVE-2026-18186: A stored format string vulnerability was found in the FTP Backup on the ADM
A stored format string vulnerability was found in the FTP Backup on the ADM. The vulnerability occurs because user-controlled backup configuration data may be written into a task log and later processed through an unsafe format string operation. An authenticated attacker can exploit this issue to disclose memory information or cause denial of service of the affected CGI process. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18186?
CVE-2026-18186 has a high severity rating of 7.1.
How do I fix CVE-2026-18186?
To fix CVE-2026-18186, update the FTP Backup on the ADM to the latest version that addresses the vulnerability.
What systems are affected by CVE-2026-18186?
CVE-2026-18186 affects the FTP Backup functionality on the ADM system.
What type of vulnerability is CVE-2026-18186?
CVE-2026-18186 is classified as a stored format string vulnerability.
Who can exploit CVE-2026-18186?
An authenticated attacker can exploit CVE-2026-18186 due to the improper handling of user-controlled backup configuration data.