PT-2025-35293 · Qnap · Viostor

Hou Liuyang · Published 2025-08-29 · Updated 2025-12-11 · CVE-2025-52856

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions VioStor versions prior to 5.1.6 build 20250621

Description An improper authentication issue has been reported in VioStor, potentially allowing a remote attacker to compromise system security.

Recommendations Update to VioStor version 5.1.6 build 20250621 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2025-10656

CVE-2025-52856

Affected Products

Viostor

References · 17

• https://osv.dev/vulnerability/CVE-2025-52856 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10656 · Security Note
• https://qnap.com/en/security-advisory/qsa-25-29 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52856 · Security Note
• https://twitter.com/VulmonFeeds/status/1961520681008390548 · Twitter Post
• https://twitter.com/CVEnew/status/1961484489609126177 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1ncev9w/top_10_trending_cves_09092025 · Reddit Post
• https://t.me/CVEtracker/31269 · Telegram Post
• https://twitter.com/CrowdCyber_Com/status/1962282737001214272 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1961493189686440396 · Twitter Post
• https://t.me/pentestingnews/67196 · Telegram Post
• https://twitter.com/catnap707/status/1961565216808005727 · Twitter Post
• https://twitter.com/dailycve/status/1998943394517967348 · Twitter Post
• https://twitter.com/CveFindCom/status/1961484015979930068 · Twitter Post
• https://twitter.com/offseq/status/1961602505013350758 · Twitter Post