CVE-2026-67244 in ADM
Summary
by MITRE • 07/30/2026
A format string vulnerability was found in the Notification OAuth settings of ADM. The vulnerability occurs because user-controlled notification configuration input may be processed through an unsafe format string operation. An authenticated administrator can exploit this issue to disclose memory information or cause denial of service of the affected component. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RUN1 as well as from ADM 5.0.0 through ADM 5.1.3.RI81.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/30/2026
This vulnerability represents a critical format string flaw within the Administration Management (ADM) platform's Notification OAuth settings module. The issue arises from improper input validation and handling of user-controlled data within the notification configuration interface, where administrator inputs are processed through unsafe format string operations that can lead to arbitrary memory disclosure or system instability. The vulnerability exists specifically in the processing of notification settings that utilize format specifiers without proper sanitization, creating a pathway for attackers to manipulate how input data is interpreted and processed by the underlying application components.
The technical exploitation of this vulnerability requires an authenticated administrator account with sufficient privileges to access and modify notification OAuth settings within the ADM interface. Attackers can craft malicious input strings containing format specifiers such as %x, %s, or %p that will be directly passed to vulnerable printf-like functions without proper validation or sanitization. This unsafe processing mechanism allows for memory address leakage through format string exploitation techniques, potentially exposing sensitive system information including heap addresses, stack contents, and other confidential data that could aid in further exploitation attempts.
From an operational impact perspective, this vulnerability creates significant security risks for organizations relying on ADM for system administration and monitoring. The ability to disclose memory information provides attackers with valuable insights into the application's internal structure and memory layout, which can be leveraged to develop more sophisticated attacks targeting other system components. Additionally, the potential for denial of service operations means that authenticated administrators could disrupt normal system operations by triggering crashes or resource exhaustion conditions within the notification processing subsystem. The vulnerability affects multiple versions spanning from ADM 4.1.0 through 4.3.3.RUN1 and also includes versions 5.0.0 through 5.1.3.RI81, indicating a widespread impact across several release branches.
The vulnerability aligns with CWE-134, which specifically addresses the use of untrusted format strings in applications, and demonstrates characteristics consistent with ATT&CK technique T1211 where adversaries leverage format string vulnerabilities to gain information disclosure capabilities. Organizations should implement immediate mitigations including input validation and sanitization of all user-controlled data within notification configuration interfaces, as well as upgrading to patched versions of ADM that address this specific vulnerability. Additional defensive measures should include monitoring for unusual administrative activities related to notification settings, implementing least privilege access controls for administrator accounts, and conducting regular security assessments of configuration management interfaces to identify similar vulnerabilities in other system components.
The exploitation of this vulnerability underscores the importance of proper input validation and secure coding practices within enterprise administration platforms. Organizations should prioritize patching affected systems immediately while also reviewing their broader application security posture to identify similar format string vulnerabilities across their infrastructure. The memory disclosure capabilities represent a particular concern for environments where sensitive operational data might be exposed through such vulnerabilities, potentially compromising the confidentiality and integrity of administrative operations. System administrators should also consider implementing additional monitoring and logging controls around notification configuration changes to detect potential exploitation attempts and maintain audit trails for security incident response activities.