ASUSTOR

Global cloud / infrastructure

Aliases / services: ASUSTOR / アサスター / 華芸科技 / 华芸科技 / ADM
Official website: https://www.asustor.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

PHP on ADM (version-specific actions)

Response status: Fixed releases available; user update required
Response information checked: 2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

NAS hardware and ADM software vendor.

ADM5.0/5.1 requires PHP8.3.36.r124 or 8.4.27.r106 or later; ADM4.1–4.3 requires 8.3.36.r3 or later. ADM3.5/4.0 is directed to disable Web Server and remove legacy PHP.

Scope: The October23 advisory's Resolved status denotes release availability, not installation on every NAS.

What users should do

Install the matching App Central fix, remove legacy PHP and disable Web Server in Web Center on legacy ADM.

Official service URL

https://www.asustor.com/

Source URLs

https://www.asustor.com/en/security/security_advisory_detail?id=72https://www.asustor.com/en/security/security_advisory_detail?id=72Response evidence

Related official sources

AS-2026-023: PHP (PHP2Shell)Official notice