CVE-2025-59389highCWE-89

CVE-2025-59389: high-severity vulnerability in QNAP Systems Inc. Hyper Data Protector

Hyper Data Protector

Published

Follow this CVE+ Monitor Hyper Data Protector

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.7%
An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Affected products
QNAP Systems Inc. · Hyper Data Protector
Related CVEs — QNAP Systems Inc. Hyper Data Protector

In the same product, most dangerous first.

CVE-2025-59388MEDIUMHyper Data ProtectorEPSS 0.5%