VULNERABILITY INTELLIGENCE
CVE-2025-59387
EPSS probability0.38%
CISA KEVNot currently listed
Published2026-01-02
Last modified2026-10-14
Description
An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: MARS (Multi-Application Recovery Service) 1.2.1.1686 and later
Weakness classification
- security@qnapsecurity.com.tw: CWE-89