CVE-2025-29892highCWE-89

CVE-2025-29892: high-severity vulnerability in QNAP Systems Inc. Qsync Central

Qsync Central

Published

Follow this CVE+ Monitor Qsync Central

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.5%
An SQL injection vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.6 ( 2025/03/20 ) and later
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
QNAP Systems Inc. · Qsync Central
Related CVEs — QNAP Systems Inc. Qsync Central

In the same product, most dangerous first.

CVE-2024-50404MEDIUMQsync CentralEPSS 1.4%CVE-2023-47564HIGHQsync CentralEPSS 1.0%CVE-2025-58470LOWQsync CentralEPSS 0.6%CVE-2025-68406LOWQsync CentralEPSS 0.6%CVE-2025-58472LOWQsync CentralEPSS 0.6%CVE-2025-57709LOWQsync CentralEPSS 0.6%