QNAP Systems Inc. VioStor vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting QNAP Systems Inc. VioStor: 2 record(s), with affected versions and fixes.
CVE-2025-52856
Critical · 9.8
CWE-287 Aug 29, 2025
VioStor
An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system.
We have already fixed the vulnerability in the following version:
VioStor 5.1.6 build 20250621 and later
CVE-2025-52861
High · 7.0
CWE-22 Aug 29, 2025
VioStor
A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
We have already fixed the vulnerability in the following version:
VioStor 5.1.6 build 20250621 and later