ZDI-26-201
MEDIUM 6.3
Published
Mar 16, 2026
QNAP TS-453E Hyper Data Protector Plugin Hard-Coded Credentials Authentication Bypass Vulnerability
QNAP
A medium-severity authentication bypass vulnerability (CVE-2025-59388) affects QNAP TS-453E NAS devices, allowing network-adjacent attackers to gain unauthorized access without credentials. Exploitation could enable attackers to compromise the device and potentially access stored data or perform unauthorized actions on the network. Security teams should prioritize patching affected TS-453E systems and restrict network access to these devices until updates are available.