ZDI-26-216 MEDIUM 6.3 Published Mar 17, 2026

QNAP TS-453E smbd domain_name Argument Injection Authentication Bypass Vulnerability

QNAP

This vulnerability (CVE-2025-62847) affects QNAP TS-453E NAS devices and allows network-adjacent attackers to completely bypass authentication without credentials, earning a medium severity rating of 6.3. An attacker exploiting this flaw could gain unauthorized access to the device and its stored data or configurations. Security teams should prioritize patching QNAP TS-453E systems immediately and restrict network access to these devices until updates are available.

Related CVE

CVE-2025-62847

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy