ZDI-26-242
LOW 3.5
Published
Mar 30, 2026
QNAP TS-453E server_handlers.pyc rr2s.kwargs Error Message Information Disclosure Vulnerability
QNAP
A network-adjacent attacker can bypass authentication on QNAP TS-453E NAS devices to disclose sensitive information, despite the normally required authentication mechanism. The vulnerability is rated as low severity with a CVSS score of 3.5 (CVE-2025-62840). Security teams should prioritize patching QNAP TS-453E systems and review network access controls, though the low severity rating suggests this is not an immediate critical threat.