PT-2026-1098 · Qfiling · Qfiling

Long Hà · Publicado 2026-01-02 · Atualizado 2026-01-07 · CVE-2025-59384

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Qfiling versions prior to 3.13.1

Description A path traversal issue exists in Qfiling that could allow remote attackers to read the contents of unexpected files or system data. Approximately 3257k+ instances are potentially exposed. The vulnerability allows access to files outside the intended directory through manipulation of file paths.

Recommendations Update Qfiling to version 3.13.1 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2026-00812

CVE-2025-59384

Produtos afetados

Qfiling

Referências · 9

• https://qnap.com/en/security-advisory/qsa-25-54 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-59384 · Nota de Segurança
• https://reddit.com/r/CVEWatch/comments/1q5fnjl/top_10_trending_cves_06012026 · Publicação no Reddit
• https://t.me/CVEtracker/41253 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2026-00812 · Nota de Segurança
• https://twitter.com/zoomeye_team/status/2008062972405653894 · Publicação no Twitter
• https://reddit.com/r/CVEWatch/comments/1q6cj0c/top_10_trending_cves_07012026 · Publicação no Reddit
• https://twitter.com/CVEnew/status/2007118417376231468 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-59384 · Aviso do Fabricante