PT-2026-7537 · Qnap · Qsync Central

Coral · Publicado 2026-02-11 · Atualizado 2026-02-16 · CVE-2025-48723

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.4

Description A buffer overflow issue exists in Qsync Central. A remote attacker who obtains a user account can potentially exploit this to alter memory or cause processes to crash.

Recommendations Update to Qsync Central version 5.0.0.4 or later.

Correção

Buffer Overflow

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-120

CWE-122

Identificadores relacionados

CVE-2025-48723

Produtos afetados

Qsync Central

Referências · 5

• https://osv.dev/vulnerability/CVE-2025-48723 · Aviso do Fabricante
• https://twitter.com/CCBalert/status/2022236318646825039 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-48723 · Nota de Segurança
• https://twitter.com/cracbot/status/2023351741337805011 · Publicação no Twitter
• https://qnap.com/en/security-advisory/qsa-26-02 · Aviso do Fabricante