PT-2026-7576 · Qnap · Qsync Central

Coral · CVE-2025-68406 · Publicado 2026-02-11 · Atualizado 2026-02-12

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.4

Description A path traversal issue exists in Qsync Central. A remote attacker who has obtained a user account may be able to read the contents of unexpected files or system data.

Recommendations Update to Qsync Central version 5.0.0.4 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2025-68406

Produtos afetados

Qsync Central

Referências · 4

• https://t.me/cveNotify/151830 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-68406 · Aviso do Fabricante
• https://qnap.com/en/security-advisory/qsa-26-02 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-68406 · Nota de Segurança