CVE-2025-59387highCWE-89

CVE-2025-59387: high-severity vulnerability in QNAP Systems Inc. MARS (Multi-Application…

MARS (Multi-Application Recovery Service)

Published · Updated

Follow this CVE+ Monitor MARS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.4%
An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: MARS (Multi-Application Recovery Service) 1.2.1.1686 and later
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Affected products
QNAP Systems Inc. · MARS (Multi-Application Recovery Service)