ADM 5.1.4: Intelligent Fan Control & Temporary Service Accounts for a Smarter NAS Experience 

ADM keeps getting better and better and the latest ADM is no exception. ADM 5.1.4 brings more flexible thermal management as well as a safer, more convenient technical support mechanism in the form of a temporary service account. Freely adjust your NAS's temperature to help you maintain sound and hardware longevity. 

New Fan Control Design 

Use the new fan control settings to choose different settings according to various needs and ADM will automatically adjust fan speed based on temperature changes detected in real-time, balancing cooling efficiency and quiet operation. 

In addition, ADM 5.1.4 also adds customizable fan speeds and a fixed speed option, allowing advanced users to adjust the NAS’s cooling strategy according to their personal usage scenarios to create a personalized user experience. 

ADM 5.1.4 introduces a new temporary service account feature for Dr. ASUSTOR. When technical support is needed, a dedicated temporary account and password through ADM can be generated, allowing the technical team to diagnose problems without sharing the main system administrator account. 

Each temporary service account has a 7-day validity period, automatically terminating upon expiration. Accounts can also be terminated early to ensure the owner of the NAS has full control. 

• PQC Hybrid TLS Post-Quantum Cryptography Technology
• Adopts the ML-KEM (Kyber) algorithm that complies with NIST standards, enhancing connection security against future quantum computer threats and assisting in protecting NAS data transmission safety.
• Enhanced ADM Account Password Management
• Adds password strength rules and expiration settings to help improve user account security.
• Upgraded ADM Defender Firewall Protection
• Provides more comprehensive connection management and blocking settings, further enhancing NAS security capabilities.
• Support for Duplicate File Scanning
• Quickly finds and manages duplicate data, effectively improving storage space utilization efficiency.
• Photo Gallery New Facial Recognition Grouping Feature
• Automatically recognizes people in photos and creates albums based on classifications, making photo management more intuitive and convenient.

Apache HTTP Server

 

The Apache Software Foundation announced multiple vulnerabilities that have been fixed in the latest release of Apache HTTP Server 2.4.68.

 

CVE-2026-43951 and CVE-2026-44119 will affect ASUSTOR products with Apache HTTP Server 2.4.62 installed.

• Apache HTTP Server 2.4.68 will be released as soon as possible to App Central to resolve the issues.

OpenSSL

 

The OpenSSL Software Foundation announced multiple vulnerabilities that have been fixed in the latest release of OpenSSL.

CVE-2026-45447 affected ASUSTOR products with ADM 5.0 and above.

• OpenSSL 3.5.7 will be released as soon as possible on ADM 5.1 to resolve the issue.

FFmpeg

 

FFmpeg announced multiple vulnerabilities that have been fixed in the latest release of FFmpeg.

 

CVE-2026-8461 affected ASUSTOR products with from ADM 4.1 to ADM 5.1.

• FFmpeg version with patch fixes will be released as soon as possible on ADM 4.3 and ADM 5.1 to resolve the issue.

Linux Kernel (Bad Epoll, pedit COW)

 

A Linux kernel local privilege escalation vulnerability, named "Bad Epoll" (with CVE-2026-46242), has been identified in the Linux kernel's eventpoll / epoll subsystem. If the vulnerability is exploited, it allows a local unprivileged attacker to corrupt kernel memory and escalate privileges to root on affected Linux systems.

 

CVE-2026-46331, also known as "pedit COW", is a Local Privilege Escalation (LPE) vulnerability in the Linux kernel's traffic control (tc) subsystem. If the vulnerability is exploited, it allows any unprivileged local user to inject payloads into memory-cached binaries to gain root access.

• CVE-2026-46242 and CVE-2026-46331 affects certain ASUSTOR products have Linux kernel versions higher than 5.18 and ADM 5.0. Updates with Linux Kernel Patch will be released as soon as possible.

Linux Kernel (GhostLock, DirtyClone)

 

A Linux kernel local privilege escalation vulnerability, named "GhostLock" (with CVE-2026-43499), has been identified in the Linux kernel's rtmutex / futex locking subsystem. If the vulnerability is exploited, it allows a local authenticated attacker to escalate privileges on affected Linux system.

A variant of recently disclosed Dirty Frag, namely "DirtyClone" (with CVE-2026-43503), has been identified in the Linux kernel's networking stack, specifically in socket buffer (sk_buff) fragment handling. The vulnerability could allow a local unprivileged attacker to corrupt page-cache-backed memory and obtain root-level privileges on affected Linux systems.

• CVE-2026-43499 affects certain ASUSTOR products that have Linux kernel versions higher than 2.6.39 and ADM versions ranging from 4.1 to 5.1. Updates with Linux Kernel Patch will be released as soon as possible.
• CVE-2026-43503 affects certain ASUSTOR products that have Linux kernel versions higher than 4.11 and ADM versions ranging from 4.1 to 5.1. Updates with Linux Kernel Patch will be released as soon as possible.

ADM

 

A stored format string vulnerability was found in FTP Backup, Internal Backup, Rsync Backup and Notification settings on the ADM.

 

Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.

ADM

 

A path traversal vulnerability was found in the VPN Clients, Wallpaper component and IHM on the ADM.

 

Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.

ADM File Explorer

 

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM.

 

Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.

The Lockerstor 2 Gen2+ has earned PCMag’s Editors’ Choice Award for its powerful hardware and exceptional expansion flexibility, making it an ideal dual-bay NAS for 4K streaming, high-speed file sharing, and professional backups. Featuring dual 5GbE ports with SMB multichannel, it delivers combined speeds of up to 10 Gbps, while four built-in M.2 NVMe slots provide versatile options for caching or independent high-speed storage. Designed with future security in mind, it also supports PQC-ready encryption and WORM technology to safeguard critical data against emerging cyber threats and unauthorized tampering.