CVE-2025-53594

N/A

Descripcion

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinder Pro Mac 7.13.0 and later Qsync for Mac 5.1.5 and later QVPN Device Client for Mac 2.2.8 and later

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado1/2/2026

Ultima modificacion1/2/2026

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-22CWE-59CWE-367

Referencias

https://www.qnap.com/en/security-advisory/qsa-25-55(security@qnapsecurity.com.tw)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.