CVE-2025-53594

N/A

Descricao

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinder Pro Mac 7.13.0 and later Qsync for Mac 5.1.5 and later QVPN Device Client for Mac 2.2.8 and later

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado1/2/2026

Ultima modificacao1/2/2026

Fontenvd

Avistamentos honeypot0

Fraquezas (CWE)

CWE-22CWE-59CWE-367

Referencias

https://www.qnap.com/en/security-advisory/qsa-25-55(security@qnapsecurity.com.tw)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.