CVE-2026-67244: A format string vulnerability was found in the Notification OAuth settings of ADM
A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration input may be processed through an unsafe format string operation. An authenticated administrator can exploit this issue to disclose memory information or cause denial of service of the affected component. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-67244?
The severity of CVE-2026-67244 is high with a score of 8.6.
What type of vulnerability is CVE-2026-67244?
CVE-2026-67244 is a format string vulnerability found in the Notification OAuth settings of ADM.
How can CVE-2026-67244 be exploited?
An authenticated administrator can exploit CVE-2026-67244 to disclose memory by using user-controlled notification configuration input.
What impact does CVE-2026-67244 have on my system?
CVE-2026-67244 can lead to sensitive information disclosure from the affected system.
How do I fix CVE-2026-67244?
To fix CVE-2026-67244, ensure that you apply the latest security updates provided by the vendor for ADM.