Vulnerabilidades do Qnap Hybrid Backup Sync
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Qnap Hybrid Backup Sync: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:qnap:hybrid_backup_sync
CVE-2025-62842
Alta · 7.8
CWE-73 02/01/2026
HBS 3 Hybrid Backup Sync
An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories.
We have already fixed the vulnerability in the following version:
HBS 3 Hybrid Backup Sync 26.2.0.938 and later
CVE-2025-62840
Baixa · 3.3
CWE-209 02/01/2026
HBS 3 Hybrid Backup Sync
A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data.
We have already fixed the vulnerability in the following version:
HBS 3 Hybrid Backup Sync 26.2.0.938 and later
CVE-2021-28799
Crítica · 9.8
KEV Urgente · 77 Exploit público Ransomware CWE-285 13/05/2021
QNAP NAS Improper Authorization Vulnerability
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to v3.0.210412 on QTS 4.3.6; versions prior to v3.0.210411 on QTS 4.3.4; versions prior to v3.0.210411 on QTS 4.3.3; versions prior to v16.0.0419 on QuTS hero h4.5.1; versions prior to v16.0.0419 on QuTScloud c4.5.1~c4.5.4. This issue does not affect: QNAP Systems Inc. HBS 2 . QNAP Systems Inc. HBS 1.3 .