CVE-2025-59387

N/A

Description

An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: MARS (Multi-Application Recovery Service) 1.2.1.1686 and later

CVE Details

CVSS v3.1 ScoreN/A

Published1/2/2026

Last Modified1/2/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-89

References

https://www.qnap.com/en/security-advisory/qsa-25-53(security@qnapsecurity.com.tw)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.