CVE-2025-53594

N/A

Description

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinder Pro Mac 7.13.0 and later Qsync for Mac 5.1.5 and later QVPN Device Client for Mac 2.2.8 and later

CVE Details

CVSS v3.1 ScoreN/A

Published1/2/2026

Last Modified1/2/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-22CWE-59CWE-367

References

https://www.qnap.com/en/security-advisory/qsa-25-55(security@qnapsecurity.com.tw)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.