PT-2025-40590 · Qnap · Qnap Authenticator

Andr.Ess · Published 2025-10-03 · Updated 2025-12-11 · CVE-2025-54154

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:P/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions QNAP Authenticator versions prior to 1.3.1.1227

Description An improper authentication issue exists in QNAP Authenticator. An attacker with physical access can exploit this to compromise system security.

Recommendations Update to QNAP Authenticator version 1.3.1.1227 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-54154

Affected Products

Qnap Authenticator

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-54154 · Security Note
• https://qnap.com/en/security-advisory/qsa-25-30 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54154 · Vendor Advisory
• https://twitter.com/CVEnew/status/1974184326418882863 · Twitter Post
• https://twitter.com/dailycve/status/1998942409837916273 · Twitter Post
• https://t.me/CVEtracker/34037 · Telegram Post