ZDI-26-242 LOW 3.5 Published Mar 30, 2026

QNAP TS-453E server_handlers.pyc rr2s.kwargs Error Message Information Disclosure Vulnerability

QNAP

A network-adjacent attacker can bypass authentication on QNAP TS-453E NAS devices to disclose sensitive information, despite the normally required authentication mechanism. The vulnerability is rated as low severity with a CVSS score of 3.5 (CVE-2025-62840). Security teams should prioritize patching QNAP TS-453E systems and review network access controls, though the low severity rating suggests this is not an immediate critical threat.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy