QNAP Systems Inc. Notification Center vulnerabilities

2 vulnerabilities

Known vulnerabilities in QNAP Systems Inc. Notification Center, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2025-54167qnap systems inc.notification center
EPSS score
0.53%
A cross-site scripting (XSS) vulnerability has been reported to affect Notification Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: Notification Center 2.1.0.3443 and later Notification Center 1.9.2.3163 and later Notification Center 3.0.0.3466 and later8.8CVE-2025-58468qnap systems inc.notification center+1
EPSS score
0.16%
A cross-site request forgery (CSRF) vulnerability has been reported to affect Notification Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following version: Notification Center 1.10.0.3291 and later