ZDI-26-243 MEDIUM 6.8 Published Mar 30, 2026

QNAP TS-453E write_file_to_svr External Control of File Path Remote Code Execution Vulnerability

QNAP

QNAP TS-453E devices contain a code execution vulnerability (CVE-2025-62842) that can be exploited by network-adjacent attackers who can bypass the device's authentication mechanism. Successful exploitation allows attackers to execute arbitrary code on affected systems with a CVSS score of 6.8. Security teams should prioritize patching QNAP TS-453E devices and consider implementing network segmentation to restrict access to these devices until patches are available.

Related CVEs

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy