VULNERABILITY INTELLIGENCE
CVE-2025-57709
CVSS score8.1 HIGH
EPSS probability0.61%
CISA KEVNot currently listed
Published2026-02-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Description
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later
Weakness classification
- security@qnapsecurity.com.tw: CWE-122
Primary references
- security@qnapsecurity.com.tw — Vendor Advisory