ZDI-26-216
MEDIUM 6.3
Published
Mar 17, 2026
QNAP TS-453E smbd domain_name Argument Injection Authentication Bypass Vulnerability
QNAP
This vulnerability (CVE-2025-62847) affects QNAP TS-453E NAS devices and allows network-adjacent attackers to completely bypass authentication without credentials, earning a medium severity rating of 6.3. An attacker exploiting this flaw could gain unauthorized access to the device and its stored data or configurations. Security teams should prioritize patching QNAP TS-453E systems immediately and restrict network access to these devices until updates are available.