VULNERABILITY INTELLIGENCE
CVE-2025-59388
CVSS score9.8 CRITICAL
EPSS probability0.50%
CISA KEVNot currently listed
Published2026-03-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: Hyper Data Protector 2.3.1.455 and later
Weakness classification
- security@qnapsecurity.com.tw: CWE-259
Primary references
- security@qnapsecurity.com.tw — Vendor Advisory