CVE-2026-67247: data master from 4.1.0.rhu2 (inclusive), through 4.3.3.run1 (inclusive), from 5.0.0.ra82 (inclusive), before…

Affected technology

data master · from 4.1.0.rhu2 (inclusive), through 4.3.3.run1 (inclusive)
asustor

data master · from 5.0.0.ra82 (inclusive), before 5.1.4.rjv2 (exclusive)
asustor

ADM · 5.0.0 through 5.1.3.RI81, 4.1.0 through 4.3.3.RUN1
ASUSTOR Inc.

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated attacker can exploit this issue to cause the affected component to access an unintended filesystem path or log database file. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as high; integrity and availability impact as none.