ADM 5.1.4新升級：智慧風扇控制與臨時服務帳號，

打造更智慧的 NAS 使用體驗

ASUSTOR 持續優化 ADM 系統體驗，最新 ADM 5.1.4 正式推出！此次更新帶來更彈性的散熱管理與更安全便利的技術支援機制，讓使用者能依照不同使用需求，自由調整 NAS 運作方式，同時提升帳號隱私與資料安全。

使用者可依照需求選擇不同設定檔，系統將根據即時偵測的溫度變化，自動調整風扇轉速，在散熱效率與安靜運作之間取得最佳平衡。

 

 

 

除了 ADM 5.1.4 帶來的新功能外，前一版本ADM 5.1.3也持續強化系統安全與管理能力，包括：

• PQC Hybrid TLS 後量子密碼加密技術
  • 採用符合 NIST 標準的 ML-KEM（Kyber） 演算法，強化未來量子電腦威脅下的連線安全，協助保護 NAS 資料傳輸安全。
• 強化 ADM 帳號密碼管理
  • 新增密碼強度規則與密碼期限設定，協助提升使用者帳號安全性，降低密碼遭受攻擊的風險。
• 升級 ADM Defender 防火牆防護
  • 提供更完整的連線管理與阻擋設定，進一步提升 NAS 的安全防護能力。
• 支援重複檔案掃描
  • 快速尋找並管理重複資料，有效提升儲存空間使用效率。
• Photo Gallery 全新人臉辨識分群功能
  • 自動辨識照片中的人物並建立分類，讓相片管理更加直覺便利。

Apache HTTP Server

 

The Apache Software Foundation announced multiple vulnerabilities that have been fixed in the latest release of Apache HTTP Server 2.4.68.

 

CVE-2026-43951 and CVE-2026-44119 will affect ASUSTOR products with Apache HTTP Server 2.4.62 installed.

• Apache HTTP Server 2.4.68 will be released as soon as possible to App Central to resolve the issues.

OpenSSL

 

The OpenSSL Software Foundation announced multiple vulnerabilities that have been fixed in the latest release of OpenSSL.

CVE-2026-45447 affected ASUSTOR products with ADM 5.0 and above.

• OpenSSL 3.5.7 will be released as soon as possible on ADM 5.1 to resolve the issue.

FFmpeg

 

FFmpeg announced multiple vulnerabilities that have been fixed in the latest release of FFmpeg.

 

CVE-2026-8461 affected ASUSTOR products with from ADM 4.1 to ADM 5.1.

• FFmpeg version with patch fixes will be released as soon as possible on ADM 4.3 and ADM 5.1 to resolve the issue.

Linux Kernel (Bad Epoll, pedit COW)

 

A Linux kernel local privilege escalation vulnerability, named "Bad Epoll" (with CVE-2026-46242), has been identified in the Linux kernel's eventpoll / epoll subsystem. If the vulnerability is exploited, it allows a local unprivileged attacker to corrupt kernel memory and escalate privileges to root on affected Linux systems.

 

CVE-2026-46331, also known as "pedit COW", is a Local Privilege Escalation (LPE) vulnerability in the Linux kernel's traffic control (tc) subsystem. If the vulnerability is exploited, it allows any unprivileged local user to inject payloads into memory-cached binaries to gain root access.

• CVE-2026-46242 and CVE-2026-46331 affects certain ASUSTOR products have Linux kernel versions higher than 5.18 and ADM 5.0. Updates with Linux Kernel Patch will be released as soon as possible.

Linux Kernel (GhostLock, DirtyClone)

 

A Linux kernel local privilege escalation vulnerability, named "GhostLock" (with CVE-2026-43499), has been identified in the Linux kernel's rtmutex / futex locking subsystem. If the vulnerability is exploited, it allows a local authenticated attacker to escalate privileges on affected Linux system.

A variant of recently disclosed Dirty Frag, namely "DirtyClone" (with CVE-2026-43503), has been identified in the Linux kernel's networking stack, specifically in socket buffer (sk_buff) fragment handling. The vulnerability could allow a local unprivileged attacker to corrupt page-cache-backed memory and obtain root-level privileges on affected Linux systems.

• CVE-2026-43499 affects certain ASUSTOR products that have Linux kernel versions higher than 2.6.39 and ADM versions ranging from 4.1 to 5.1. Updates with Linux Kernel Patch will be released as soon as possible.
• CVE-2026-43503 affects certain ASUSTOR products that have Linux kernel versions higher than 4.11 and ADM versions ranging from 4.1 to 5.1. Updates with Linux Kernel Patch will be released as soon as possible.

ADM

 

A stored format string vulnerability was found in FTP Backup, Internal Backup, Rsync Backup and Notification settings on the ADM.

 

Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.

ADM

 

A path traversal vulnerability was found in the VPN Clients, Wallpaper component and IHM on the ADM.

 

Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.

ADM File Explorer

 

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM.

 

Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.