ADM 5.1.4新升级：智能风扇控制与临时服务账号，

打造更智能的 NAS 使用体验

ASUSTOR 持续优化 ADM 系统体验，最新 ADM 5.1.4 正式推出！此次更新带来更弹性的散热管理与更安全便利的技术支持机制，让使用者能依照不同使用需求，自由调整 NAS 运作方式，同时提升账号隐私与数据安全。

用户可依照需求选择不同配置文件，系统将根据实时侦测的温度变化，自动调整风扇转速，在散热效率与安静运作之间取得最佳平衡。

此外，ADM 5.1.4 也新增自定义风扇转速与固定转速选项，让进阶用户能依照个人使用情境，例如长时间高负载运作或低噪音环境需求，自行调整 NAS 散热策略，打造符合个人需求的使用体验。

当 NAS 发生问题，需要 ASUSTOR 技术团队协助远程检查时，过去用户可能需要提供系统管理员帐户信息，增加账号安全风险。

 

ADM 5.1.4 为 Dr. ASUSTOR 导入全新的「临时服务账号」功能。当使用者需要远程技术支持时，可透过 ADM 产生专用的临时账号与密码，提供技术团队进行问题诊断，而无需分享主要系统管理员账号。

 

每组临时服务账号皆具备 7 天使用期限，使用期限结束后将自动停用；使用者也可依需求提前停用账号，进一步降低帐户信息外泄的风险，提升 ASUSTOR NAS 的隐私保护与安全性。

除了 ADM 5.1.4 带来的新功能外，前一版本ADM 5.1.3也持续强化系统安全与管理能力，包括：

• PQC Hybrid TLS 后量子密码加密技术
  • 采用符合 NIST 标准的 ML-KEM（Kyber） 算法，强化未来量子计算机威胁下的联机安全，协助保护 NAS 数据传输安全。
• 强化 ADM 账号密码管理
  • 新增密码强度规则与密码期限设定，协助提升使用者账号安全性，降低密码遭受攻击的风险。
• 升级 ADM Defender 防火墙防护
  • 提供更完整的联机管理与阻挡设定，进一步提升 NAS 的安全防护能力。
• 支持重复档案扫描
  • 快速寻找并管理重复数据，有效提升储存空间使用效率。
• Photo Gallery 全新人脸辨识分群功能
  • 自动辨识照片中的人物并建立分类，让相片管理更加直觉便利。

Apache HTTP Server

 

The Apache Software Foundation announced multiple vulnerabilities that have been fixed in the latest release of Apache HTTP Server 2.4.68.

 

CVE-2026-43951 and CVE-2026-44119 will affect ASUSTOR products with Apache HTTP Server 2.4.62 installed.

• Apache HTTP Server 2.4.68 will be released as soon as possible to App Central to resolve the issues.

OpenSSL

 

The OpenSSL Software Foundation announced multiple vulnerabilities that have been fixed in the latest release of OpenSSL.

CVE-2026-45447 affected ASUSTOR products with ADM 5.0 and above.

• OpenSSL 3.5.7 will be released as soon as possible on ADM 5.1 to resolve the issue.

FFmpeg

 

FFmpeg announced multiple vulnerabilities that have been fixed in the latest release of FFmpeg.

 

CVE-2026-8461 affected ASUSTOR products with from ADM 4.1 to ADM 5.1.

• FFmpeg version with patch fixes will be released as soon as possible on ADM 4.3 and ADM 5.1 to resolve the issue.

Linux Kernel (Bad Epoll, pedit COW)

 

A Linux kernel local privilege escalation vulnerability, named "Bad Epoll" (with CVE-2026-46242), has been identified in the Linux kernel's eventpoll / epoll subsystem. If the vulnerability is exploited, it allows a local unprivileged attacker to corrupt kernel memory and escalate privileges to root on affected Linux systems.

 

CVE-2026-46331, also known as "pedit COW", is a Local Privilege Escalation (LPE) vulnerability in the Linux kernel's traffic control (tc) subsystem. If the vulnerability is exploited, it allows any unprivileged local user to inject payloads into memory-cached binaries to gain root access.

• CVE-2026-46242 and CVE-2026-46331 affects certain ASUSTOR products have Linux kernel versions higher than 5.18 and ADM 5.0. Updates with Linux Kernel Patch will be released as soon as possible.

Linux Kernel (GhostLock, DirtyClone)

 

A Linux kernel local privilege escalation vulnerability, named "GhostLock" (with CVE-2026-43499), has been identified in the Linux kernel's rtmutex / futex locking subsystem. If the vulnerability is exploited, it allows a local authenticated attacker to escalate privileges on affected Linux system.

A variant of recently disclosed Dirty Frag, namely "DirtyClone" (with CVE-2026-43503), has been identified in the Linux kernel's networking stack, specifically in socket buffer (sk_buff) fragment handling. The vulnerability could allow a local unprivileged attacker to corrupt page-cache-backed memory and obtain root-level privileges on affected Linux systems.

• CVE-2026-43499 affects certain ASUSTOR products that have Linux kernel versions higher than 2.6.39 and ADM versions ranging from 4.1 to 5.1. Updates with Linux Kernel Patch will be released as soon as possible.
• CVE-2026-43503 affects certain ASUSTOR products that have Linux kernel versions higher than 4.11 and ADM versions ranging from 4.1 to 5.1. Updates with Linux Kernel Patch will be released as soon as possible.

ADM

 

A stored format string vulnerability was found in FTP Backup, Internal Backup, Rsync Backup and Notification settings on the ADM.

 

Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.

ADM

 

A path traversal vulnerability was found in the VPN Clients, Wallpaper component and IHM on the ADM.

 

Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.

ADM File Explorer

 

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM.

 

Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.