ZDI-26-243
MEDIUM 6.8
Published
Mar 30, 2026
QNAP TS-453E write_file_to_svr External Control of File Path Remote Code Execution Vulnerability
QNAP
QNAP TS-453E devices contain a code execution vulnerability (CVE-2025-62842) that can be exploited by network-adjacent attackers who can bypass the device's authentication mechanism. Successful exploitation allows attackers to execute arbitrary code on affected systems with a CVSS score of 6.8. Security teams should prioritize patching QNAP TS-453E devices and consider implementing network segmentation to restrict access to these devices until patches are available.