Qsync Central
Monthly
Path traversal in QNAP Qsync Central allows an attacker who already holds a valid Qsync Central user account to read files and system data outside the intended directory scope on the NAS. The flaw originates from improper limitation of a pathname to a restricted directory (CWE-22); because the CVSS vector specifies PR:L, exploitation is authenticated - remote unauthenticated Internet attackers cannot reach it against default configurations. Impact is assessed as information disclosure of high confidentiality value rather than code execution or data destruction, and no public exploit code has been identified at time of analysis. All versions prior to Qsync Central 5.0.0.6, 5.1.0.2, and 5.2.0.4 are affected, and QNAP has released fixed builds on each of these branches.
Authenticated remote attackers with a valid Qsync Central user account can exploit a unix symbolic link (symlink) following vulnerability (CWE-61) in QNAP Qsync Central to compromise system security, potentially leading to low impact on confidentiality, integrity, and availability. Affected versions are Qsync Central prior to 5.0.0.7, 5.1.0.3, 5.2.0.5, and 5.3.0.2. This medium-severity issue (CVSS 4.0 base 5.3) has no public exploit identified at time of analysis and requires the attacker to first obtain a valid account on the NAS.
NULL pointer dereference in QNAP Qsync Central allows an authenticated remote user to cause a denial-of-service (DoS) condition that crashes the Qsync Central service. Exploitation requires the attacker to first obtain a valid Qsync Central / NAS user account, and the resulting crash is recoverable, affecting only the Qsync Central service rather than the entire NAS. No public exploit code has been identified at the time of analysis; the vendor has released a fix in Qsync Central 5.0.0.4 and later.
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. [CVSS 6.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 4.9 MEDIUM]
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. [CVSS 4.9 MEDIUM]
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. [CVSS 6.5 MEDIUM]
A relative path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. [CVSS 6.5 MEDIUM]
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. [CVSS 4.9 MEDIUM]
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. [CVSS 4.9 MEDIUM]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. [CVSS 6.5 MEDIUM]
An out-of-bounds read vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. [CVSS 6.5 MEDIUM]
A use of out-of-range pointer offset vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read sensitive portions of memory. [CVSS 6.5 MEDIUM]
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 5.5 MEDIUM]
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 5.5 MEDIUM]
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 5.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. [CVSS 8.8 HIGH]
A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data or modify memory. [CVSS 8.1 HIGH]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A path traversal vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQL injection in QNAP Qsync Central 5.0.0 (all builds prior to 5.0.0.2) allows a remote attacker who already holds a valid, even low-privileged, user account to inject arbitrary SQL through the application's standard network interface, resulting in full compromise of the confidentiality and integrity of the backend database - potentially escalating to unauthorized code or command execution as the vendor notes. The vulnerability is not known to be actively exploited (no CISA KEV listing) and no public exploit code has been identified at time of analysis; EPSS is 0.09% (26th percentile), reflecting the mitigating requirement for valid credentials (CVSS v3.1 PR:L, AV:N, AC:L, UI:N). QNAP has released a fixed build, 5.0.0.2 (2025/07/31), which should be applied to eliminate the condition.
SQL injection in QNAP Qsync Central versions 5.0.0 through below 5.0.0.2 lets a remote attacker who already holds a valid Qsync Central user account run unauthorized code or commands on the underlying NAS with high confidentiality and integrity impact, though availability is not affected. The flaw is network-reachable and low-complexity but gated behind the account prerequisite (PR:L, authenticated), so unauthenticated internet exposure alone is not sufficient; EPSS is low (0.09%, 26th percentile) and no public exploit has been identified at time of analysis, with no CISA KEV listing. QNAP has released a vendor patch in Qsync Central 5.0.0.2 (2025/07/31).
Qsync Central 5.0.0 before 5.0.0.2 permits an authenticated remote user to cause uncontrolled resource consumption, resulting in denial of service. Exploitation requires a valid Qsync Central account (CVSS PR:L) and is limited to availability impact, with no confidentiality or integrity impact. No public exploit identified at time of analysis; EPSS is 0.15% (36th percentile), and QNAP has released a fix in Qsync Central 5.0.0.2 (2025/07/31) and later.
Denial of service in QNAP Qsync Central 5.0.0 before 5.0.0.2 affects deployments where an attacker already holds a valid user account. The NULL pointer dereference can crash the service and reduce availability, but it does not permit data disclosure or modification. No public exploit was identified at time of analysis, EPSS is low at 0.15% (35th percentile), and exploitation is constrained by the authenticated-account prerequisite.
Out-of-bounds write in QNAP Qsync Central 4.x before 5.0.0.1 allows a remote attacker who already holds a valid low-privileged user account to corrupt memory and cause a high availability impact, potentially crashing or disrupting the sync service; confidentiality and integrity impacts are assessed as none. The vendor has released a fix in Qsync Central 5.0.0.1 (2025/07/09), making this a moderate-severity authenticated availability issue rather than an unauthenticated emergency. EPSS is 0.16% (37th percentile), and no public exploit identified at time of analysis.
Authenticated low-privilege users can exhaust an unthrottled resource in Qsync Central 5.0.0 before 5.0.0.2, causing denial of service for Qsync Central or other processes competing for that resource; confidentiality and integrity impacts are not assessed. Exploitation requires a valid Qsync Central user account (PR:L) and no user interaction, and the vendor fixed the flaw in Qsync Central 5.0.0.2 (2025/07/31). No public exploit identified at time of analysis, EPSS is 0.15% (36th percentile), and this is a moderate, not urgent, priority.
Authenticated denial of service in Qsync Central 4.x allows a remote user with valid credentials to crash the service by triggering a NULL pointer dereference. The flaw is reachable over the network with low attack complexity, but exploitation requires an existing account on the QNAP device; impact is limited to reduced availability, with no data exposure or modification. QNAP has released a fix in Qsync Central 5.0.0.1 (2025/07/09) and later, and no public exploit was identified at time of analysis; EPSS is low at roughly 0.15%.
Denial of service in QNAP Qsync Central 4.x allows an authenticated remote attacker to crash the synchronization service by triggering a NULL pointer dereference. Affected deployments are those running Qsync Central versions below 5.0.0.1; exploitation requires a valid user account but no victim interaction, and impact is limited to availability. No public exploit code or active exploitation is identified at time of analysis, and EPSS is low at 0.15%, so this is a moderate-priority issue patched in Qsync Central 5.0.0.1 (2025/07/09).
Denial of service in QNAP Qsync Central 4.x can be triggered by an authenticated remote user who supplies input that causes a NULL pointer dereference, disrupting the Qsync Central service. The flaw affects versions before 5.0.0.1 (2025/07/09) and requires a valid Qsync Central user account, so unauthenticated attackers cannot reach it directly. No public exploit was identified at time of analysis, there is no CISA KEV entry, EPSS is low at 0.15% (35th percentile), and a vendor patch is available.
A remote authenticated user can crash QNAP Qsync Central 4.x by triggering a NULL pointer dereference, causing a denial of service limited to availability (CVSS 3.1 A:L) with no confidentiality or integrity impact. The vendor fixed the issue in Qsync Central 5.0.0.1 (2025/07/09) and later; no public exploit was identified at time of analysis, and EPSS is 0.15% (35th percentile), consistent with a low-priority issue.
Authenticated denial of service in Qsync Central 4.x allows a user with a valid account to exhaust shared resources and disrupt access for other systems, applications, or processes. The flaw is CWE-770 resource allocation without limits or throttling, and exploitation requires authentication (CVSS PR:L); there is no confidentiality or integrity impact. QNAP fixed it in Qsync Central 5.0.0.1 (2025/07/09) and later, and the available intelligence shows a low EPSS score of 0.15% with no public exploit identified at time of analysis.
Resource-exhaustion denial of service in QNAP Qsync Central 4.x lets any authenticated user with a valid, low-privileged account consume unbounded server resources over the network, making the sync service unavailable to other users (CWE-770). No user interaction is needed, but the attacker must first obtain credentials, so exposure is greatest for insider threats, stolen credentials, or environments with weak or shared accounts; impact is limited to availability, with no confidentiality or integrity loss. QNAP fixed the issue in Qsync Central 5.0.0.1 (2025/07/09); no public exploit identified at time of analysis, no CISA KEV listing, and EPSS is low at 0.15% (36th percentile).
Denial of service in QNAP Qsync Central 4.x allows authenticated low-privileged users to exhaust server resources and disrupt availability for other systems, applications, or processes on the NAS. Exploitation requires a valid user account, network reachability to the Qsync Central service, and no user interaction; the vendor has released Qsync Central 5.0.0.1 (2025/07/09) as the fix. No public exploit identified at time of analysis, EPSS is low at 0.15% (36th percentile), and this is a genuine but moderate-priority issue rather than a top-tier emergency.
Resource exhaustion in QNAP Qsync Central 4.x allows an authenticated remote user to consume service resources without effective throttling, potentially denying access to other users or processes on the NAS. Exploitation requires a valid Qsync Central account and network reach to the service; there is no confidentiality or integrity impact. QNAP has fixed the issue in Qsync Central 5.0.0.1 (2025/07/09), and no public exploit was identified at time of analysis (EPSS 0.15%).
Authenticated path traversal in QNAP Qsync Central 4.x before 5.0.0.1 permits a remote attacker who first obtains a valid user account to read files or system data outside the intended directory. The flaw is network-reachable with low complexity but limited to low confidentiality impact, and no public exploit has been identified at time of analysis. QNAP has released Qsync Central 5.0.0.1 (2025/07/09) to fix the issue; EPSS is low at 0.06% (19th percentile).
A path traversal vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A path traversal vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A path traversal vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A path traversal vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An improper certificate validation vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An improper certificate validation vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An SQL injection vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An SQL injection vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQL injection vulnerability in Qsync Central that allows authenticated remote attackers to execute arbitrary code or commands with high impact on confidentiality, integrity, and availability. The vulnerability affects all versions prior to Qsync Central 4.5.0.6 (released 2025/03/20), and while no active KEV or public PoC is explicitly referenced in the provided data, the high CVSS score of 8.8 combined with low attack complexity and low privilege requirements indicates this is a serious, readily exploitable vulnerability that should be prioritized for patching.
Format string vulnerability in QNAP Qsync Central that allows authenticated remote attackers to read sensitive data or modify memory without user interaction. The vulnerability affects all versions prior to Qsync Central 4.5.0.6 (released March 20, 2025), with a CVSS score of 8.1 indicating high severity. While no public exploit or KEV status is currently documented, the low attack complexity and requirement for only low-privilege user access make this a significant risk for organizations running vulnerable versions.
A link following vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Path traversal in QNAP Qsync Central allows an attacker who already holds a valid Qsync Central user account to read files and system data outside the intended directory scope on the NAS. The flaw originates from improper limitation of a pathname to a restricted directory (CWE-22); because the CVSS vector specifies PR:L, exploitation is authenticated - remote unauthenticated Internet attackers cannot reach it against default configurations. Impact is assessed as information disclosure of high confidentiality value rather than code execution or data destruction, and no public exploit code has been identified at time of analysis. All versions prior to Qsync Central 5.0.0.6, 5.1.0.2, and 5.2.0.4 are affected, and QNAP has released fixed builds on each of these branches.
Authenticated remote attackers with a valid Qsync Central user account can exploit a unix symbolic link (symlink) following vulnerability (CWE-61) in QNAP Qsync Central to compromise system security, potentially leading to low impact on confidentiality, integrity, and availability. Affected versions are Qsync Central prior to 5.0.0.7, 5.1.0.3, 5.2.0.5, and 5.3.0.2. This medium-severity issue (CVSS 4.0 base 5.3) has no public exploit identified at time of analysis and requires the attacker to first obtain a valid account on the NAS.
NULL pointer dereference in QNAP Qsync Central allows an authenticated remote user to cause a denial-of-service (DoS) condition that crashes the Qsync Central service. Exploitation requires the attacker to first obtain a valid Qsync Central / NAS user account, and the resulting crash is recoverable, affecting only the Qsync Central service rather than the entire NAS. No public exploit code has been identified at the time of analysis; the vendor has released a fix in Qsync Central 5.0.0.4 and later.
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. [CVSS 6.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 4.9 MEDIUM]
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. [CVSS 4.9 MEDIUM]
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. [CVSS 6.5 MEDIUM]
A relative path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. [CVSS 6.5 MEDIUM]
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. [CVSS 4.9 MEDIUM]
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. [CVSS 4.9 MEDIUM]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. [CVSS 6.5 MEDIUM]
An out-of-bounds read vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. [CVSS 6.5 MEDIUM]
A use of out-of-range pointer offset vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read sensitive portions of memory. [CVSS 6.5 MEDIUM]
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 5.5 MEDIUM]
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 5.5 MEDIUM]
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 5.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. [CVSS 8.1 HIGH]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. [CVSS 8.8 HIGH]
A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data or modify memory. [CVSS 8.1 HIGH]
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. [CVSS 6.5 MEDIUM]
A path traversal vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQL injection in QNAP Qsync Central 5.0.0 (all builds prior to 5.0.0.2) allows a remote attacker who already holds a valid, even low-privileged, user account to inject arbitrary SQL through the application's standard network interface, resulting in full compromise of the confidentiality and integrity of the backend database - potentially escalating to unauthorized code or command execution as the vendor notes. The vulnerability is not known to be actively exploited (no CISA KEV listing) and no public exploit code has been identified at time of analysis; EPSS is 0.09% (26th percentile), reflecting the mitigating requirement for valid credentials (CVSS v3.1 PR:L, AV:N, AC:L, UI:N). QNAP has released a fixed build, 5.0.0.2 (2025/07/31), which should be applied to eliminate the condition.
SQL injection in QNAP Qsync Central versions 5.0.0 through below 5.0.0.2 lets a remote attacker who already holds a valid Qsync Central user account run unauthorized code or commands on the underlying NAS with high confidentiality and integrity impact, though availability is not affected. The flaw is network-reachable and low-complexity but gated behind the account prerequisite (PR:L, authenticated), so unauthenticated internet exposure alone is not sufficient; EPSS is low (0.09%, 26th percentile) and no public exploit has been identified at time of analysis, with no CISA KEV listing. QNAP has released a vendor patch in Qsync Central 5.0.0.2 (2025/07/31).
Qsync Central 5.0.0 before 5.0.0.2 permits an authenticated remote user to cause uncontrolled resource consumption, resulting in denial of service. Exploitation requires a valid Qsync Central account (CVSS PR:L) and is limited to availability impact, with no confidentiality or integrity impact. No public exploit identified at time of analysis; EPSS is 0.15% (36th percentile), and QNAP has released a fix in Qsync Central 5.0.0.2 (2025/07/31) and later.
Denial of service in QNAP Qsync Central 5.0.0 before 5.0.0.2 affects deployments where an attacker already holds a valid user account. The NULL pointer dereference can crash the service and reduce availability, but it does not permit data disclosure or modification. No public exploit was identified at time of analysis, EPSS is low at 0.15% (35th percentile), and exploitation is constrained by the authenticated-account prerequisite.
Out-of-bounds write in QNAP Qsync Central 4.x before 5.0.0.1 allows a remote attacker who already holds a valid low-privileged user account to corrupt memory and cause a high availability impact, potentially crashing or disrupting the sync service; confidentiality and integrity impacts are assessed as none. The vendor has released a fix in Qsync Central 5.0.0.1 (2025/07/09), making this a moderate-severity authenticated availability issue rather than an unauthenticated emergency. EPSS is 0.16% (37th percentile), and no public exploit identified at time of analysis.
Authenticated low-privilege users can exhaust an unthrottled resource in Qsync Central 5.0.0 before 5.0.0.2, causing denial of service for Qsync Central or other processes competing for that resource; confidentiality and integrity impacts are not assessed. Exploitation requires a valid Qsync Central user account (PR:L) and no user interaction, and the vendor fixed the flaw in Qsync Central 5.0.0.2 (2025/07/31). No public exploit identified at time of analysis, EPSS is 0.15% (36th percentile), and this is a moderate, not urgent, priority.
Authenticated denial of service in Qsync Central 4.x allows a remote user with valid credentials to crash the service by triggering a NULL pointer dereference. The flaw is reachable over the network with low attack complexity, but exploitation requires an existing account on the QNAP device; impact is limited to reduced availability, with no data exposure or modification. QNAP has released a fix in Qsync Central 5.0.0.1 (2025/07/09) and later, and no public exploit was identified at time of analysis; EPSS is low at roughly 0.15%.
Denial of service in QNAP Qsync Central 4.x allows an authenticated remote attacker to crash the synchronization service by triggering a NULL pointer dereference. Affected deployments are those running Qsync Central versions below 5.0.0.1; exploitation requires a valid user account but no victim interaction, and impact is limited to availability. No public exploit code or active exploitation is identified at time of analysis, and EPSS is low at 0.15%, so this is a moderate-priority issue patched in Qsync Central 5.0.0.1 (2025/07/09).
Denial of service in QNAP Qsync Central 4.x can be triggered by an authenticated remote user who supplies input that causes a NULL pointer dereference, disrupting the Qsync Central service. The flaw affects versions before 5.0.0.1 (2025/07/09) and requires a valid Qsync Central user account, so unauthenticated attackers cannot reach it directly. No public exploit was identified at time of analysis, there is no CISA KEV entry, EPSS is low at 0.15% (35th percentile), and a vendor patch is available.
A remote authenticated user can crash QNAP Qsync Central 4.x by triggering a NULL pointer dereference, causing a denial of service limited to availability (CVSS 3.1 A:L) with no confidentiality or integrity impact. The vendor fixed the issue in Qsync Central 5.0.0.1 (2025/07/09) and later; no public exploit was identified at time of analysis, and EPSS is 0.15% (35th percentile), consistent with a low-priority issue.
Authenticated denial of service in Qsync Central 4.x allows a user with a valid account to exhaust shared resources and disrupt access for other systems, applications, or processes. The flaw is CWE-770 resource allocation without limits or throttling, and exploitation requires authentication (CVSS PR:L); there is no confidentiality or integrity impact. QNAP fixed it in Qsync Central 5.0.0.1 (2025/07/09) and later, and the available intelligence shows a low EPSS score of 0.15% with no public exploit identified at time of analysis.
Resource-exhaustion denial of service in QNAP Qsync Central 4.x lets any authenticated user with a valid, low-privileged account consume unbounded server resources over the network, making the sync service unavailable to other users (CWE-770). No user interaction is needed, but the attacker must first obtain credentials, so exposure is greatest for insider threats, stolen credentials, or environments with weak or shared accounts; impact is limited to availability, with no confidentiality or integrity loss. QNAP fixed the issue in Qsync Central 5.0.0.1 (2025/07/09); no public exploit identified at time of analysis, no CISA KEV listing, and EPSS is low at 0.15% (36th percentile).
Denial of service in QNAP Qsync Central 4.x allows authenticated low-privileged users to exhaust server resources and disrupt availability for other systems, applications, or processes on the NAS. Exploitation requires a valid user account, network reachability to the Qsync Central service, and no user interaction; the vendor has released Qsync Central 5.0.0.1 (2025/07/09) as the fix. No public exploit identified at time of analysis, EPSS is low at 0.15% (36th percentile), and this is a genuine but moderate-priority issue rather than a top-tier emergency.
Resource exhaustion in QNAP Qsync Central 4.x allows an authenticated remote user to consume service resources without effective throttling, potentially denying access to other users or processes on the NAS. Exploitation requires a valid Qsync Central account and network reach to the service; there is no confidentiality or integrity impact. QNAP has fixed the issue in Qsync Central 5.0.0.1 (2025/07/09), and no public exploit was identified at time of analysis (EPSS 0.15%).
Authenticated path traversal in QNAP Qsync Central 4.x before 5.0.0.1 permits a remote attacker who first obtains a valid user account to read files or system data outside the intended directory. The flaw is network-reachable with low complexity but limited to low confidentiality impact, and no public exploit has been identified at time of analysis. QNAP has released Qsync Central 5.0.0.1 (2025/07/09) to fix the issue; EPSS is low at 0.06% (19th percentile).
A path traversal vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A path traversal vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A path traversal vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A path traversal vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An improper certificate validation vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An improper certificate validation vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An SQL injection vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
An SQL injection vulnerability has been reported to affect Qsync Central. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
SQL injection vulnerability in Qsync Central that allows authenticated remote attackers to execute arbitrary code or commands with high impact on confidentiality, integrity, and availability. The vulnerability affects all versions prior to Qsync Central 4.5.0.6 (released 2025/03/20), and while no active KEV or public PoC is explicitly referenced in the provided data, the high CVSS score of 8.8 combined with low attack complexity and low privilege requirements indicates this is a serious, readily exploitable vulnerability that should be prioritized for patching.
Format string vulnerability in QNAP Qsync Central that allows authenticated remote attackers to read sensitive data or modify memory without user interaction. The vulnerability affects all versions prior to Qsync Central 4.5.0.6 (released March 20, 2025), with a CVSS score of 8.1 indicating high severity. While no public exploit or KEV status is currently documented, the low attack complexity and requirement for only low-privilege user access make this a significant risk for organizations running vulnerable versions.
A link following vulnerability has been reported to affect Qsync Central. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.