ZDI-26-201 MEDIUM 6.3 Published Mar 16, 2026

QNAP TS-453E Hyper Data Protector Plugin Hard-Coded Credentials Authentication Bypass Vulnerability

QNAP

A medium-severity authentication bypass vulnerability (CVE-2025-59388) affects QNAP TS-453E NAS devices, allowing network-adjacent attackers to gain unauthorized access without credentials. Exploitation could enable attackers to compromise the device and potentially access stored data or perform unauthorized actions on the network. Security teams should prioritize patching affected TS-453E systems and restrict network access to these devices until updates are available.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy