Qnap Qsync Central vulnerabilities, page 4
63 vulnerabilities
Known vulnerabilities in Qnap Qsync Central, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-33039qnap systems inc.qsync central+1
EPSS score0.36%
An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.
We have already fixed the vulnerability in the following version:
Qsync Central 5.0.0.1 ( 2025/07/09 ) and laterCVE-2024-50404qnap systems inc.qsync central+1EPSS score1.43%
A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations.
We have already fixed the vulnerability in the following versions:
Qsync Central 4.4.0.16_20240819 ( 2024/08/19 ) and laterCVE-2023-47564qnap systems inc.qsync central+1EPSS score1.01%
An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.
We have already fixed the vulnerability in the following versions:
Qsync Central 4.4.0.15 ( 2024/01/04 ) and later
Qsync Central 4.3.0.11 ( 2024/01/11 ) and later