CVE-2026-24932: An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.
The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle (MitM) attack, which may obtain the sensitive information of DDNS updating process, including the user's account email, MD5 hashed password, and device serial number.This issue affects ADM: from 4.1.0 through 4.3.3.ROF1, from 5.0.0 through 5.1.1.RCI1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-24932?
CVE-2026-24932 is classified as a high severity vulnerability due to improper certificate validation.
How do I fix CVE-2026-24932?
To fix CVE-2026-24932, update your ADM software to a version that addresses the certificate validation issue.
Which versions of ADM are affected by CVE-2026-24932?
CVE-2026-24932 affects ADM versions from 4.1.0 to 4.3.3.ROF1 and from 5.0.0 to 5.1.1.RCI1.
Can exploiting CVE-2026-24932 lead to data breaches?
Yes, exploiting CVE-2026-24932 could allow attackers to intercept or tamper with sensitive data during DDNS updates.
Is CVE-2026-24932 related to SSL/TLS security?
Yes, CVE-2026-24932 involves improper validation of SSL/TLS certificates which compromises secure connections.