PT-2025-35294 · Qnap · Viostor

Published 2025-08-29 · Updated 2025-09-09 · CVE-2025-52861

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions VioStor versions prior to 5.1.6 build 20250621

Description A path traversal vulnerability exists in VioStor. A remote attacker gaining administrator access can potentially read the contents of unexpected files or system data.

Recommendations Update to VioStor version 5.1.6 build 20250621 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-52861

Affected Products

Viostor

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-52861 · Security Note
• https://twitter.com/VulmonFeeds/status/1961518120926929288 · Twitter Post
• https://twitter.com/CVEnew/status/1961484488648675746 · Twitter Post
• https://t.me/CVEtracker/31270 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1ncev9w/top_10_trending_cves_09092025 · Reddit Post
• https://qnap.com/en/security-advisory/qsa-25-28 · Note